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ABSTRACT 


This  report,  sunxmar ixos  cinalyuos  oit  t he  non -opornt  i nr) 
reliability  of  missile  materiel,  bony  term  non-oporatiny 
date!  has  been  analyzed  toyether  with  accelerated  sitorayu 
life  test  dcitii-  Reliability  prediction  models  have  been 
developed  for  various  classes  of  devices. 

This  repon.  is  a result  of  a proyram  whoso  objoctive  is 
the  development  of  non-operatiny  (storage)  rel ivnbi lity  pre- 
diction and  assurance  techniques  for  missile  muterioi.  The 
analysis  results  wi.1.1  bu  used  by  U,  S.  Army  pei  sonnol  and 
.'contractors  in  ovaluatiny  current  missile  proyj\ui\n  and  in 
the  desiyn  of  future  missile  systems. 

The  storayc  reliability  research  program  consists  of 
a country  wide  data  survey  and  collection  effort,  »'Acceloralod 
testing,  special  tost  programs  and  dovulopmenl  of  n non- 
operating reliability  data  bank  at  the  U.  S.  Army  Mii’.sile 
Research  & Development  Conunand,  Redstone  Arsenal,  Alabiumi. 

The  Army  plans  a continuing  effort  to  maintain  the  data  ban)< 
and  analysis  reports. 

Por  more  inforination,  contact; 

Conunander 

U.  S.  Army  R&D  Comniand 

ATTN:  DRUMI-QS,  Mr.  C.  K.  Provence 

Huildituj  4 500 

Redstone'  Ar.'U'nal  , AL  35809 
Autovon  740-3235 
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1 . 0  INTRODUCTION 


1 . 1 Miss i Reliability  Considerations 

Materiel  in  the  Army  inventory  must  withstand  long 
periods  of  storage  and  "launch  ready"  non -activated  or  dor- 
mant time  as  well  as  perform  operationally  in  severe  launch 
and  flight  environments.  In  addition  to  the  stress  of  tem- 
poraturf'  soaks  and  aging,  they  must  often  endure  the  abuse  of 
frequent  transportation  and  handling  and  the  climatic  extremes 
of  the  forward  area  battlefield  environment. 

Missiles  spend  the  majority  of  the  time  in  this  non- 
operating environment.  In  newer  missile  systems,  complexity 
is  increasing  significantly,  longer  service  lives  arc  being 
required,  and  periodic  maintenance  and  checkouts  are  being 
reduced.  The  combination  of  these  factors  places  great  im- 
portance on  selecting  missile  materials  which  are  capable  of 
performing  reliably  in  each  of  the  environments. 

The  inclusion  of  slorage  reliability  requirements  in  the 
initial  system  specifications  has  also  placed  an  importance 
on  maintaining  non-operating  reliability  prediction  data  for 
evaluating  the  design  and  mechanization  of  new  systems. 

1 . 2 S to rage  1^1 iabi I i ty  Research  Program 

An  extensive  effort  is  being  conducted  by  the  U.  S.  Army 
Missilt.'  Research  & Development  Command  to  provide  detailed 
analyses  of  missili'  materiel  and  to  generate  reliability 
prediction  data.  A missile  material  reliability  parts  count 
prediction  handbook,  LC-78-1,  has  been  developed  and  provides 
the  current  prediction  data  resulting  from  this  effort. 

Tiiis  report  is  an  update  to  report  LC-76-2  dated  May,  1976  . 
It  provides  a suumiary  of  the  analyses  performed  under  uhe 
storage  reliability  research  program  and  background  information 
for  tlie  predictions  in  LC-78-1.  Included  are  sunmuries  of  rt-ui  1 
time  and  test  dat.i,  failure  modes  and  mechai^ isms , and  conclusion 
and  rec:ommendat  ions  resulting  from  analysis  of  the  data.  Those 
re-commendations  include  special  design,  packaging  and  product 
assurance  data  and  inlormation  on  specific  part  types  and  part 
cons  t met  i on  . 
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For  a number  of  the  part  types,  detailed  analysis 
reports  are  also  available.  These  reports  present  details 
on  part  construction,  failure  inodes  and  inechanisms,  parameter 
drift  and  aging  trends,  applications,  and  other  considerations 
for  the  selection  of  materiel  and  reliability  prediction  of 
missile  systems. 

The  U.  S.  Army  Missile  Research  & Development  Command  also 
maintains  a Storage  Reliability  Data  Bank.  This  data  bank  con- 
sists of  a computerized  data  base  with  generic  part  storage 
reliability  data  and  a storage  reliability  report  library  con- 
taining available  research  and  test  reports  of  non-operating 
reliability  research  efforts. 

For  the  operational  data  contained  in  this  report,  the  user 
should  refer  to  the  follov/ing  sources:  MIL-HDBK-217B,  Military 
Standardization  Handbook,  Reliability  Prediction  of  Electronic 
Equipment;  Reliability  Analysis  Center  (RAC)  Microcircuit 
Failure  Rates;  RADC-TR-69-458,  Revision  to  the  Nonelectronic 
Reliability  Handbook;  and  the  Government-Industry  Data  Exchange 
Program  (GIDEP)  Summaries  of  Failure  Rate  Data. 

1.3  f;U s sile  Environments 

A missile  system  may  be  subjected  to  various  modes  of 
transportation  and  handling,  temperature  soaks,  climatic 
extremes,  and  activated  test  time  and  "launch  ready"  time 
in  addition  to  a controlled  storage  environment.  Some  studies 
have  been  performed  on  missile  systems  to  measure  these  en- 
vironments. A summary  of  several  studies  is  presented  in 
Report  BH-7811,  "The  Environmental  Condlti'^ns  Experienced  by 
Rockets  and  Missiles  in  Storage,  Transit  and  Operations" 
prepared  by  the  Raytheon  Company,  dated  December  1973. 

In  this  report,  skin  temperatures  of  missiles  in  con- 
tainers were  recorded  in  dump  (or  open)  storage  at  a maximum 
of  1G5’F  (74°C)  and  a minimum  of  -44°F  (-42®C) . In  non- 
earth  covered  bunkers  temperatures  have  been  measured  at  a 
maximum  of  116°F  (47°C)  to  a minimum  of  -31°F  (-35°C) . In 
earth  covered  bunkers,  temperatures  have  been  measured  at 
a maximum  of  lOS^F  (Sy^C)  to  a minimum,  ox  23®F  (-5"C)  . 
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Acceleration  extremes  during  transpox'tation  have  been 
measured  for  track,  rail,  aircraft  and  ship  transportation. 

Up  to  7 G's  at  300  hertz  have  been  measured  on  trucks;  1 G 
at  300  hertz  by  rail;  7 G*s  at  1100  hertz  on  aircraft;  and 
1 G at  70  hertz  on  shipboard. 

Maximum  shock  stresses  for  truck  transportation  have 
been  measured  at  10  G's  and  by  rail  at  300  G's. 

Although  field  data  does  not  record  those  levels,  where 
available,  the  type  and  approximate  character  of  storage  and 
transportation  are  identified  and  used  to  classify  the  devices. 


1 . 4 ^iyut'om  Lovol  Anrtlyaiu 

, Tht»  primary  offort  in  the  fitorayo  Uuliability  Retsjoarch 
rvuy ram  .in  on  aiuilyaiu  oi  thtt  non-oporatiny  chnraetori fitigs 
of  piU't.ii.  in  tho  data  Goll«ot.lon  of  fort,  howovor,  Homo  data 
haa  boon  made  available  on  ayntom  charactoriatics - 

This  data  indicatoa  that  a reliability  prodietion  for 
tho  nyntom  banud  on  part  level  data  will  not;  accuratoly  pro- 
joc't;  maintonaneo  aetiona  if  tlio  miauilo  ia  ehooKud  and  main- 
tainud  porlodicnlly , Factora  contributing  to  thin  disparity 
includo  tost  equipment  reliability,  doaiyn  problems,  and 
yonoral  handliny  problems.  In  many  caaoa,  those  problems  aro 
aaaignod  to  tho  nyatom  and  not  ref looted  in  the  part  lovol 
analysis . 

in  yonoral , a factor  of  2 should  be  multipliod  by  the 
device  failuro  ratu  to  obtain  the  maintenance  rate.  Three 
oyntem  examples  aro  described  bolowt 

1.4. 1 Ryatom  A 

For  system  A,  a chock  of  874  miasiloa  in  the  field  in- 
dioatoH  142  failed  miasiloa.  These  failed  misailes  were  taken 
to  a maintonaneo  facjility.  At  tho  maintenance  facility,  no 
fault  could  bo  found  in  51  of  tho  miasilea.  Two  misailoa 
fau.Uu  wore  corrected  by  adjustments.  Thia  loft  89  failures 
whi(.;h  could  bo  attributed  to  part  failure,  Tho  parts  wore 
fail\u.'('  anaiyxod  and  thu  analyaia  indicated  19  failures  to 
be  a f '-sul  t of  oloclrical  ovorstreaa.  These  failures  were 
dos.lqnatod  de}.iiqn  problems. 

Therefore  only  70  (491)  of  thu  oriyinal  .1‘U'l  i u.i. luru;, 
wore  desiynatod  as  non-opori'iting  part  Cai  lures. 

1.4.2  SviU-om  h 

For  .system  B,  26  missile  failures  wore  analy/.ud.  Of 
those  juj  fi»ult  was  found  in  2 missllos;  adjustments  wore  ro~ 
quill'd  lur  2;  I'xl.ornal  eluctrio.il  ovorstro.ss  or  haadliag 
damaqu  was  found  in  10;  a circuit  desiqn  prohlum  V'/as  aasiynod 
tv.»  I,  and  eompunent  failuroa  wort*  assiynod  to  11. 

1,4.1  t'.yro  AsiU'inb  1 i t>a 

An  lUuily.siM  of  gyro  .issembly  rottirn  i indical.i'd  that,  two 
thirds  oi  t ht*  ri'lurna  were  attx'ibutotl  it)  dosUjn  tlofect.s, 
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misliandling , cond.ltionr.  outisiclc  design  requiromcn I s , and'  to 
erroneous  attribution  of  system  problems. 

Therefore,  only  33  percent  of  the  returns  were  designated 
as  non-operating  part  failures. 

1 . 5 Limitations  of  Reliability  Prediction 

Practical  limitations  arc  placed  in  any  reliability 
analysis  effort  in  gathering  and  analyzing  data.  Field 
data  is  generated  at  various  levels  of  detail  and  reported  in 
varying  manners.  Often  data  on  environments,  applications, 
part  classes  and  part  construction  arc  not  available.  Even 
more  often,  failure  analyses  arc  non-cxistant . Data  on  low 
use  devices  and  new  technology  devices  is  also  difficult  to 
obtain.  Finally  in  the  storage  environment,  the  very  low 
occurrence  of  failures  in  many  devices  requires  extensive 
storage  time  to  generate  any  meaningful  statistics. 

These  difficulties  lead  to  prediction  of  conservative  or 
pessimistic  failure  rates.  The  user  may  review  tlie  existing 
data  in  the  backup  analyses  reports  in  any  case  where  design 
or  program  decision  is  necessary. 

1 . 6 Life  Cycle  Reliability  Prediction  Modeling 

Developing  missile  reliability  predictions  requires 

sovera]  tasks.  The  first  tasks  include  defining  the  system, 
its  mission,  environments  and  life  cycle  operation  or  de- 
ployment scenario. 

The  system  and  mission  definitions  provide  the  basis 
for  cons trucliing  reliability  sxiccess  models.  The  modeling 
can  incorporate  reliability  block  diagrams,  truth  tables 
and  logic  <liagr<nns.  Descriptions  of  tliese  methodic  are  not 
Incliuh’d  lu’re  bul  can  be  studit'd  in  det’.al  1 lu  Mil p-HDUK-I’ 1 7b 
or  edher  ( exl  r.  li.:;lt’d  in  (die  bibl  uigraphy . 

AllfM  ( lu*  tel  iabi  I i ty  ::iu;*.'ej:s  model  i ng  is  coi’.ip  1 e I I'd  , 

T •’ 1 i al)  i 1 1 t y lire  eyele  pred  i c*l- i ^tn  modi' liim  lor  v'arli  bloek 
<’f  tinil  in  I Is*  s.iu'ce:::;  model  is  pet  formed  based  (si  (ho  deli 
nil  ienr;  ol  I he  !:y::lr>m  envirbnmenl  anil  de)  1 1 oymen  t seenarie. 

'I'll  i I I*  I i .lb  i I i I y life*  eyele*  model  ing  is  based  esi  a "wooden 
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round"  concept  in  order  to  assess  the  missile's  capability 
of  performing  in  a no~maintenanco  environment.  The  general 
equation  for  this  modeling  is: 


^r.,C  ■''  ^T/H  ^ ^STOR  ^ ^TEST  ^ ^LR/D  ^ \r/0  x R^^  x Rp 


where : 
R 


LC 


is  the  unit's  life  cycle  reliability 


R.^yjj  is  the  unit's  reliability  during  handling  and 
transportation 


R, 


STOR 

\est 


R 


'LR/b 


is  the  reliability  during  storage 
is  the  unit's  reliability  during  check  out  and 
test 

is  the  unit's  reliability  during  dormant  launch 
ready  time 

^LR/0  unit's  reliability  during  operational 

(>10%  electronic  stress)  launch  ready  time 
is  the  unit's  reliability  during  powered  launch 
and  flight 

Up  is  the  unit's  reliability  during  unpowerod  flight 


Thu  extent  of  the  data  to  date  does  not  provide  a cap- 
ability of  separately  estimating  the  reliability  of  trans- 
portation and  storage  for  missile  materiel.  Also  data  has 
indicat. ed  no  difference  between  dormant  (>0  and  <10%  oloctri- 
cal  si  loss)  and  non-operating  time.  Therefore,  the  general 
equation  can  bo  simplified  as  follows: 


where;  R in  t)io  unit’s  reliability  during  transportation 
and  handling,  storage  ond  dormant  time  (non- 
operating timo) 

^NO  ^ nou-C)pe  rating  and  dormant  time 

K iu  the  uu.lt'u  ml  lability  during  oliockout,  tcjst 
or  system  i>xoraiso  during  which  components  have 
<>\oal  r.ioal  power  applied  (ope,ri\t,ing)  . 


t is  the  sum  of  all  operating  time  excluding  Icuuich 
and  flight 

Rjj.  is  the  unit's  reliability  during  powered  launch 
and  flight  (Propulsion  System  Active) 

tjj^  is  the  pov;ered  launch  and  flight  time 

Rp  is  the  unit’s  reliability  during  unpowered  flight 

tp  is  +-he  unpowered  flight  time 

t is  the  sum  of  tjjQ/  and  tp 


The  values  RQf  Rp  are  calculated  using  several 

methods.  The  primary  method  is  to  assume  exponential  distri- 
butions as  follows: 

= e"’‘N0*^0 

Rp(tp)  « 


The  failure  rates  Aq,  A^^  and  Ap  are  calculated  from 

the  models  in  the  following  sections.  Aj^q  is  calculated  fr-om 
the  non-operating  failure  rate  models.  The  remaining  failure 
rates  are  calculated  from  the  operational  failure  rate  models 
u.sing  the  approx-iriate  environmental  adjustment  factors.  Each 
prediction  model  is  based  on  part  stress  factors  which  may  in- 
clude part  quality,  complexity,  construction,  derating,  and  other 
characteristics  of  the  device. 

Other  methods  for  calculating  the  reliability  include 
wearout  or  aging  reliability  models  and  cyclic  or  one  shot 
reliability  models.  For  each  of  these  casc.-s,  the  device  sec- 
tion will  specify  the  method  for  calculating  the  reliability. 
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1 . 7 Ko  I i a Lvi  L i t y I,’ rt'U  i i on .U!) 

Kruquonfcly  (.lui'inq  oatLy  ciuaiyn  phanuii,  roliability  pru- 
ciioVioiuj  ixi'o  I'oquii'txl  with  an  insufCiciont  ayatcim  clofinition 
to  uti,  Li'/o  the  nttoau  lovol  fAilviro  rata  modola.  Thoroforo, 
a "parts  count"  prediction  technique  has  been  prepared,  it 
provides  avorayo  base  failure  rates  for  various  part  typos 
and  provides  K feietora  for  various  phases  of  tho  systot'tt  de- 
ployment soonario  to  yonorato  a first  estimate  of  system  re- 
liability. Thi.s  prediction  is  proeontod  in  Report  LC-78-1. 

^ ^ Suimary  of  Report  Contents 

The  report  is  divided  into  five  volumes  which  break  out 
major  component  or  part  classifications:  Volume  I,  Electrical 
and  Electronic  Devices;  Volvimo  II,  Electromechanical  Devices; 
Volume  III,  Hydraulic  and  Pneumatic  Devices;  Volume  IV, 
Ordnance  Devices;  and  Volume  V,  Optical  and  Electro  Optical 
Devices.  Table  1-1  provides  a listing  of  tho  major  part  types 
included  in  each  volume. 

1 . 9 Extent  of  Volume  II  Update 

This  report  updates  report  LC-76-2,  Volume  II,  dated 
May  197C.  An  additional  1.1  billion  part  hours  and  109 
failures  have  been  analyzed.  Table  1-2  summarizes  the  major 
changes  that  occurred  in  the  analyses. 
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Volume  1 

TAULK  .1-1.  Rl'U'OKT  CONTHNTH 

Klucl rioa 1 und  KlueLroniu  Dovloua 

Dutailv>d  Repi  . 
Numbv>r  .1  A) j.p 

H^etion 

2.0  Microoloctronic,'  Dovtcoa 

LC-78-IC1 , ‘1/7H 

3.0 

Disoroto  Semiconductor  Devicos 

^ .0 

I’lloctronic  Vactmm  Tubes 

hC-78-VTl,  1/78 

! j . 0 

HoaiHtO''n 

- 

ft.O 

Cupar  ! i.ora 

- 

7.0 

inductive  Dovicua 

- 

8.0 

Crynl ala 

- 

9.0 

MJ  scellanoous  Kloctrical  Devicos 

- 

10.0 

Connectors  .and  Connections 

- 

11.0 

Printed  Wiring  Boards 

- 

Volume  11  liloctromoohanical  Devices 

Section 

2.0  Civroa 

LC-78-EM1,  2/78 

3.0 

Ac  c e 1 o r ome  1 r a 

LC-78-EM2,  2/78 

4.0 

Switches 

LC-78-EM4,  2/78 

5.0 

Relays 

DC-78-EM3,  2/78 

6.0 

I'llectromeclAanical  Rotating  Devices 

- 

7.0 

Misco llaenous  Electromechanical  Devices 

- 

Volume  III  Hydraulic  and  Pneumatic  Devices 

Section 

2.0  Accumulators 

LC-76-MP2,  5/76 

3.0 

Actuators 

LC-76-HP3,  5/76 

4.0 

Batteries 

LC-78-B1,  2/78 

5.0 

Bearings 

— 

6.0 

Compressors 

7.0 

Cylinders 

8.0 

Filters 

— 

9.0 

Fittings/Connections 

— 

10.0 

Gaskets 

— 

11.0 

0-Rings 

— 

12.0 

Pistons 

— 

13,0 

Pumps 

LC-76-11P4,  5/76 

14.0 

Regulators 

15.0 

Reservoirs 

16.0 

Valves 

LC-76-11P1  , 5/76 

Volume  IV  Ordnance  Devices 

Sc'ct  ion 

2.0  Solid  Propellant  Motors 

LC-76-OR1,  5/70 

3.0 

Igniters  and  Safe  & Arm  Devices 

LC-76-OR2,  5/70 

4.0 

Solid  Propellant  Gas  Generators 

LC-7G-OR3,  5/70 

5.0 

Misc.  Ordnance  Devices 

- 

Volume  V Optical  and  l:;lectro  Optical  Devices 
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TABLE  1-2.  EXTENT  OF  VOLUME  II  UPDATE 
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2 . 0 Gyroscopes 

A gyroscope  is  used  to  detect  angular  motion  with  respect  to 
inertial  (Newtonian)  space.  The  usual  construction  is  a spinning 
wheel,  the  angular  momentum  of  which  remains  fixed  in  space  if  no 
external  torques  are  applied.  If  such  a wheel  is  forced  to  move 
about  one  axis,  it  will  precess  about  another,  and  the  precession 
motion,  which  can  be  conveniently  measured,  is  proportional  to  the 
forced  rotation.  The  usual  construction  uses  single  axis  bearings 
for  both  the  spinning  wheel  and  the  precession  axes. 

A primary  distinction  among  gyros  is  between  single  degree  of 
freedom  and  two  degree  of  freedom  gyros.  Single  degree  of  freedom 
gyros  have  only  one  gimbal  axis,  which  means  only  one  set  of  gimlDal 
bearings,  only  one  torquer  and  only  one  pickoff.  Rate  gyros  and  in- 
tegrating rate  gyros  are  single  degree  of  freedom  designs. 

A two  degree  of  freedom  gyro  (also  called  a free  gyro)  incor- 
porates two  gimbals,  each  with  a pickoff  and  torquer,  into  the  gyro 
itself.  These  gyros  are  often  used  in  systems  which  provide  a small 
alignment  torque. 

Because  of  its  complexity,  it  is  convenient  to  think  of  a gyro 
in  terms  of  its  functional  components:  wheel,  spin  bearings,  spin 
motor,  gimbal,  pickoff  and  torquer. 

The  purpose  of  the  wheel  is  to  provide  a large  ratio  of 
angular  .momentum  to  the  disturbance  torques  in  the  system.  Speeds 
of  12,000  or  24,000  rpm  are  typical.  The  wheel  may  be  split  into 
symmetrical  halves,  and  the  web  of  the  wheel  may  be  shaped  to  make 
the  wheel  isoelastic.  Typical  construction  consists  of  a heavy  rim 
supported  by  a conical  web. 

The  spin  bearings  support  the  wheel  both  radially  and  axially, 
while  allowi.ng  relatively  free  rotation.  Ball  bearings  are  typical, 
and  provide  a comparatively  rigid  support.  They  can  be  designed 
to  be  isoelastic  and  to  provide  axial  support  by  using  a large 
contact  angle  (about  35°). 

Gas  bearings  have  also  been  used  for  spin  bearings.  A 
typical  design  uses  the  spin  itself  to  pull  gas  into  the  bearing 
so  that  no  external  supply  is  required. 
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Tho  spill  nuU-.or  is  typLoally  a synclironous  motor  of  tho 
hystorosis  typo,  oithojr  two  or  four  polo.  Tho  supply  is  typi- 
cally two  phase  400  hortz.  If  tho  scale  factor  is  critical  a 
synchronous  design  must  be  used,  but  in  systems  whore  the  gyro 
is  simply  driven  to  null  an  induction  motor  may  be  used.  Power 
for  the  spin  motor  must  be  provided  without  introducing  disturb- 
ance torques,  typical  practice  is  to  use  flexible  leads  in  a 
conf iguration  which  can  be  compensated.  Neither  the  hysteresis 
nor  the  induction  design  require  electrical  connection  to  the 
wheel  assembly. 

Where  tlu'  gyro  is  only  needed  for  a few  minutes,  ci  spring 
or  squib  may  bo  used  to  bring  the  wheel  up  to  speed  before  the 
start  of  tho  mission.  No  spin  motor  is  then  required. 

Tho  giml)al  ring  should  be  rigid,  or  at  least  isooiastic 
and  must  be  carefully  balanced.  The  gimbal  bearings  have  little 
motion  but  must  bo  as  nearly  torque  free  as  possible.  Some  de- 
signs use  ball  bearings  with  dither  or  counter  rotation  of  the  fixed 
raceway  to  eliminate  breakaway  friction.  Gas  bearings  are  some- 
times used,  but  an  external  gas  supply  is  necessary. 

Some  designs  use  a fluid  to  float  the  weight  supported  on 
tlu'  gimbal  bearings.  The  bearing  load  cun  be  reduced  by  a factor 
of  1000  in  this  way,  thus  reducing  those  torques  which  are  propor- 
tionai  to  the  bearing  load. 

Tho  pickoff  reads  the  angle  thru  which  the  gimbal  bearing 
axis  lias  been  turned.  It  is  important  that  the  pickoff  not 
introduce  a reaction  torque,  so  potentiometers  are  suitable  only 
in  low  accuracy  systems.  Typical  pickoff s vise  a differential 
transformer  or  an  optical  readout.  A variable  reluctance  design 
can  eliminate  tho  moving  coil  and  its  connections  in  a differential 
trans  former . 

Tlie  torquer  is  almost  invariably  electromagnetic.  The 
design  ean  be  very  like  that  of  the  pickoff,  except  tliat  currents 
flow  in  botli  sets  of  coils.  The  desired  torque  is  determined  in 
an  electrical  network  outside  the  gyro. 

Kxotic  gyroscopes  using  quite  different  principles  should 
appear  in  production  in  t.ht?  next  few  years. 
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2.1  Sir  iM'.jo  Ho  I iab  i 1 i Ly  AOvtiysis 

2.1.1  H U'>rt^lo_  Fai  luro  Rato  a 

Thu  oxpoclod  intrinsic  storaye  failure  rate  foi  rate 
yyroscopes  is  133  fits  (failures  per  billion  hours)  with  90% 
confidence  that  the  true  failure  rate  lies  below  175  fits. 

The  followiny  factors  are  suyyosted  as  being  consistent  with 
the  dat.i  available: 

" For  fre>-  ^lyros,  multiply  by  a factor  of  2. 

For  ropLacomei\t  rate,  multiply  by  a factor  of  3. 

'I'iiis  study  is  based  upon  the  8 35  million  piart-hours 
collected  to  date  containing  209  failures.  The  data  includes 
eight  missile  progriuus,  three  space  applications  and  one  report 
for  which  the  application  was  not  identified.  Nearly  all  of 
the  data  is  for  rate  gyros.  For  gyroscopes  showing  failures, 
a range  of  failure  rates  from  121  to  524  fits  was  observed. 

A comparison  with  operating  data  indicates  that  the 
operating  failure  rate  in  a ground  environment  is  about  196 
times  the  storage  failure  rate,  and  the  operating  failure  rate 
in  the  missile  launch  environment  is  about  4000  times  the 
storage  failure  rate. 

2.1.2  Data  Description 

Data  was  collected  from  twelve  sources,  eight  of  which 
are  missile  progrvams.  The  data  summarized  in  Table  2.1-1 
represents  835  million  gyro  non-opera tina  hours  witli  209 
failures  reported.  The  failure  I'ates  for  each  source  are 
calculated  ifi  fits  (failures  per  billion  hours)  and  ci.re  the 
maximum  likelihood  values.  One  failure  is  assumed  in  the 
failure  rate  calculation  if  there  were  no  failures  reported. 
Failures  attributable  to  design  defects  which  l\ave  been 
corrected,  to  mishandling,  to  conditions  outside  design 
requirements,  and  to  erroneous  attribution  of  system  problc  s 
have  not  been  included. 

Where  identified,  the  data  includes  gyros  with  ages  up 
to  6.3  years.  For  several  sources,  it  was  necessary  to  estimate 
the  part  non  -operating  hours  as  indicated  in  Table  2.1-1.  These 
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estimates  are  conservative  and  part  non-operating  hours  could 
have  been  greater  than  Indicated.  Each  data  souroc  is  described 
in  more  dot.ail  below. 

Some  dlfforonc*'S  could  be  anticipated  between  the  data 
sources  duo  to  differences  in  the  design  and  in  the  testing 
(screening)  in  the  various  programs.  For  the  programs  with 
large  exposure,  the  components  listed  represent  production  over 
extended  periods  of  time,  which  moans  that  both  the  design  and 
the  production  process  have  varied.  Since  those  failures  which 
were  romodiod  are  not  counted,  the  failure  rates  should 
roprost^nt  those  attained  at  the  end  of  the  project,  i.e.,  by 
tht'  "mature"  design. 

For  examples,  a step  was  added  to  gyro  manufacture  in 
Source.  M-2  to  saturate  the  exposed  plastic  with  the  damping 
fluid  by  exposing  it  under  high  pressure.  This  prevents  sub- 
sequent change  in  the  volume  of  the  damping  fluid.  In  the 
gyros  for  Missile  M,  a set  of  sliding  contacts  was  replaced 
by  a flex  lead,  and  later  the  material  of  the  flex  leads 
was  chcinged  to  avoid  a corrosion  problem. 

Each  data  source  is  described  in  niore  detail  below. 

2 . 1 . 2 . 1 Source  Da ta 

Source  A represents  a reliability  study  performed  under 
contract  to  RADC.  This  source  identified  the  type  and  quality 
grades  for  the  devices,  however,  it  provided  no  information 
regarding  storage  conditions  or  individual  pi'ograms. 

2 . 1 . 2 . 2 Source  B Da t a 

The  storage  dnta  under  Source  B actually  represents 
standby  data  in  ,gn  orbiting  satellite  environment.  No  failures 

were  indicated  in  76  thousand  gyro  standby  hours. 

2 . 1 , 2 . 3 Source  D Data 

Source.  L represents  a special  test  program  for  gyros 
designed  for  a surface-to-surface  missile.  Six  gyros  were 
fjtorod  in  a controlled  environment  for  6.3  years  with  no  failure 
repo.r  tc;d . 
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TABLK  2.1-1  GYRO  NON-OPERATING  DATA 


SOURCE 

NO.  OF  DEVICES 

MILLION  PART 
STORAGE  HRS. 

FAILURES 

FAILURE  RATE 
IN  FITS 

A 

34.367 

18 

524  . 

B 

15 

.076 

0 

(<13158  .) 

L 

6 

.331 

0 

(<3021. ) 

M-1 

115 

4.44* 

0 

(<225. ) 

M-2 

1U2 

3.94* 

1 

254  . 

MISSILE 

E-1 

4370 

63.802 

23 

360  . 

F 

120 

2.628 

0 

(<380. ) 

G 

39 

1.118 

0 

(<894  .) 

H 

5355 

85.1 

13 

153. 

I 

8280 

82.36 

10 

121. 

M 

- 

30.6* 

16 

523. 

T 

12000 

525.6 

128 

244  . 

U 

15 

.657 

0 

(<1522. ) 

TOTALS 

*Estiinatecl  part  hours 

835.019 

209 

250.3 
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2 . 1 . 2 . 4 Source  M Data 

The  first  entry  in  Table  2.1-1  under  source  M represents 
spacecr^ift  platform  gyros  which  are  man-rated.  These  are  the 
most  expensive  gyros  in  Table  2. 1-1. The  platforms  stored  in 
a controlled  environment  were  retested  once  per  year.  None 
of  the  gyros  have  been  outside  of  the  operationc'il  specifications 
Averiige  ago  is  5.3  years. 

The  second  entry  under  source  M also  represents  spacecraft 
gyros.  These  gyros,  stored  under  the  same  conditions,  are  man- 
rated,  however  they  are  used  in  a redundant  configuration.  One 
failure  was  reported  as  a result  of  a spin  bearing  seizure. 

Other  failures  attributed  to  damping  fluid  volume  loss  were  not 
included  since  they  were  considered  design  defects. 

2 . 1 . 2 . 5 Missile  E-1  Data 

Missij.e  E-1  data  consists  of  874  missiles  stored  for  20 
months.  The  missiles  were  stored  in  containers  exposed  to 
oxt-.ornal  environmental  conditions  in  the  northeast  U.  S.  They 
were  also  transported  once  from  coast  to  coast.  Eeich  missile 
contains  five  rate  gyros.  A total  of  twenty  three  gyro  failures 
v/ore  reported. 

2 . 1 . 2 . 6  Missile  F Data 

Missile  F data  consists  of  120  missiles,  60  of  which  were 
stored  for  one  year  and  60  for  two  years.  The  missiles  in 
storage  containers  experienced  the  following  environments: 

30  missiles  stored  outside  in  the  Arctic  on  wooden  racks  with 
canvas  covers;  30  missiles  stored  outside  in  the  southeast 
desert  under  open  sided  metal  roof  sheds;  30  missiles  stored 
outside  in  the  canal  zone  under  open  sided  metal  roof  sheds; 
and  30  missiles  stored  in  the  southeast  U.  S.  in  bunkers.  No 

gyro  failures  have  been  reported, 

2.1.  2.7  Missile  G Data 

Missile  G data  consists  cf  39  missiles  .stored  for  periods 
from  28  months  to  56  months  for  an  average  storage  period  of 
39  months.  The  missiles  in  storage  containers  cixperienced  the 
following  environments:  12  mi.ssiles  storc;d  outsiae  in  the 
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southoftjih  desert;  12  missiles  stored  outside  in  the  northeast 
U.  S.;  12  missiles  stored  on  the  Gulf  Coast;  and  23  missiles 
stored  in  bunkers  in  the  southeast  U.  S,  No  gyro  failures 
have  been  reported. 

2.1 . 2 . B Missile  H Data 

Missile  H da  La  represents  field  data  from  a recent  army 
missile  program  fielded  in  the  1970 *s.  The  major  item  in  which 
the  devices  were  assembled  was  subjected  to  opererting  times  at 
high  and  low  temperatures,  shock  and  vibration.  The  missiles 
were  transported  overseas  and  stored  for  various  lengths  of 
time.  No  tests  were  run  until  the  missiles  were  removed  from 
storage  and  returned  to  the  states.  Storage  durc'itions  varied 
from  6 months  to  6 years  with  an  average  time  of  1.8  years. 
Storage  environments  included  cannister  time  in  a controlled 
environment,  cannister  time  subject  to  outside  elements  and 
missile  time  on  pallets  and  on  launchers.  A number  of  samples 
were  also  run  through  road  tests  under  field  cenditions.  Each 
missile  containing  five  rate  gyros.  Thirteen  gyro  failures 
have  been  reported. 

2 . 1 . 2 . 9 Missile  I PaTa 

Missile  I data  consists  of  2,070  missiles  stored  for 
periods  from  1 month  to  40  months  for  an  average  storage 
period  of  14  monttis.  Approximately  80  percent  of  the  missiles 
were  stored  in  U.  S,  depots  while  the  remainder  were  stored  at 
various  bases  around  the  country.  Ten  gyro  failures  have  been 
reported . 

2.1.2.10  Missile  M Data 

Missile  M data  rcpresciits  cx  surface-to-surface  missile. 
Data  was  available  on  approximately  13  years  of  depot  repair 
history.  Tlu'  data  inelxides  some  operating  time,  typically 
290  hours.  F.iilure  anlaysis  was  {"ormed  on  these  gyros 
indicating  fixe  main  failure  mode  to  be  ’’open  torquf'r  windings." 
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2 . I . . I I M i SM  i I o 'r_  Data 

MIrsiIo  T data  ropreaentr.  n surfncc-to-«l r missi.lt;.  Data 
<'n  a 3000  misaiU;  .inventory  for  an  average  of  i>  ytsirs;  is  in- 
clndod.  At  tost,  miaailo  n^ea  ranged  from  G montlu*.  to  H year:;. 
The  mlssi.los,  Iniilt  in  the  1954  time  frame,  contained  a tjyi-o 
package  with  three  rate  gyros  and  one  free  gyro.  The  data 
indlca.tod  .13*^  gyro  package  failures.  Periodic  ter. ting  per- 
formed on  the  gyro  packages  was  limited.  It  cons.isted  {W 
swinging  the  mi.ssilo  and  observing  gyro  ovitputc  for  proper 
polarity.  Only  catastrophic  failures  could  be  seen,  and  these 
are  .'dontifiod  only  to  the  package  level. 

2 . 1 .2.12  Missile  II  Data 

Missile  U data  represents  an  air-to-surf ace  missile. 

Data  on  15  missiles  stored  for  five  years  is  inclvided.  Vive 
missiles  were  stored  .for  a year  in  a tropic  zone  .aid  five  in 
an  arctic  zone.  No  failures  in  the  gyros  themselves  were  re- 
ported, however,  three  failures  in  solder  joints  t.o  gyro 
-initiators  were  attributed  to  corrosion  from  heat,  humidity 
find  salt  (tropic  zone) . Solder  is  chemically  attacked  under 
thoiio  conditions,  and  these  failures  arc  classified  as  a 
design  defect. 

2.1.3  Data  Vvafluation 

Pooling  all  of  the  sources  results  in  209  failures  in 
835,019  million  storage  hours  giving  a failure  rate  of  250 
fit.*;.  A dccis.ion  was  made  to  remove  the  data  set  for  Missile 
T because  failvires  were  id'sntified  only  at  the  platform  level 
and  may  have  been  a result  of  other  components.  The  remaining 
.source's  r.liow  R1  fai.lviro.s  in  309.418  million  storage  hours 
c}ivii\g  a failure  rate  of  262  fits  (virtually  the  same  as  with 
Mis^;.ile  ’V  included). 

Tlu'  failure'  rates  for  those'  sources  showing  failures  ranged 
from  121  tci  524  fits.  A tost  of  s.ignif .icance  (di^^'::cribed  in. 
Appc'ndix  A)  was  performed  to  test  whether  a single  fa.ilure 

i 

could  di's.eribe  all  I he  data  sets.  The  test  u\dit.'.\l  »'d  tliat 
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there  was  i\  .significant  difference  with  three  data  sets  having 
siqnfiicantly  higher  failure  rates.  These  three  data  sets 
were  placed  into  a sepairate-  group.  Then  the  two  groups  were 
tested  c\nd  no  significant  differences  vccrc  indicated.  The 
pooled  data  for  the  two  groups  are  sliown  in  Tabic  2.1-2. 

The  grovip  .1  data  in  Table  2.1-2  includes  source  A data  for 
which  little  dei.iil  is  available,  however,  at  least  a major 
portion  is  from  the  19f>0’s  time  frame.  Missile  E-1  is  early 
19G()'s  program  with  the  tests  performed  in  1960.  Missile  M 
is  also  late  50 's  and  early  1960  technology.  Therefore  the 
data  in  group  1 primarily  represents  1960  technology. 

The  grovip  2 data  represents  a wide  range  of  applications. 
Sources  IJ,  M-1  and  M-2  represent  spacecraft  programs  while 
missile  programs  F and  G represent  mid  to  late  1960 's  technology 
and  missiles  H and  I early  1970  techtvology.  The  lower  failure 
rate  for  this  group  would  tend  to  indicate  an  improvement  in 
gyro  design  For  storage  reliability.  Therefore,  a non-operating 
failure  rate  for  current  technology  gyros  is  estimated  to  be 
133  fits  and  a 90V.  confidence  that  the  time  failure  rate  lies 
below  175  fits. 

Nearly  all  of  the  data  analyzed  is  for  rate  gyros.  Free 
gyros  with  two,  rather  than  one,  sets  of  gimbal  bearings  should 
not  exceevi  twice  the  failure  rate  as  that  calculated  for  rate 
gyros , 

Fi<.'ld  data  has  indicated  that  component  ro})laccmcnt  rates 
exceed  component  failure  rates.  This  results  from  replace- 
ments for  components  accidentally  damaged  (overheating  is  a 
common  i.!ause)  or  replacements  for  components  removed  without 
tv'st  in  the  course  of  trying  to  repair  a system.  The  data  from 
Mi.'-.r.  iU'  M i ndic  it  ed  th('  replacement  rate  approacliod  three  times 
the  ftiilure  iMte. 

.’.2  OpiM-.il  lona  1 /N.^ii-Opera t iv~inal  Kel  ivVbi  1 i ty  Gompar  Ison 

Opi'r.j  I i on.al  failun'  rale  data  for  rate  gyroscopes  was 


TABLE  2.1-2. 

POOLED  DATA 

GROUPS 

GROUP  1 

SOURCE 

NO.  OF  DEVICES 

MILLION  PART 
STORAGE  HRS. 

FAILURES 

FAILURE  RATE 
IN  FITS 

A 

- 

34.367 

18 

524  . 

Missile 

E-1 

4370 

63.802 

23 

360. 

Missile 

M 

- 

30  .,6 

16 

523. 

TOTALS 

128.769 

57 

443. 

GROUP  2 

SOURCE 

NO.  OF  DEVICES 

MILLION  PART 
STORAGE  HRS. 

FAILURES 

FAILURE  RATE 
IN  FITS 

B 

15 

.076 

0 

(<13158 . ) 

L 

6 

.331 

0 

(<  3021. ) 

M-1 

- 

4.44 

0 

(•5225.) 

M-2 

- 

3.94 

1 

254  . 

MISSILE 

, F 

120 

2.628 

0 

(<  380.) 

G 

39 

1.118 

0 

(<  894  .) 

H 

5355 

85.1 

13 

153. 

I 

8280 

82.36 

10 

121. 

U 

15 

.657 

0 

(<  1522. ) 

TOT 

•ALS 

180.65 

24 

133. 

\ 
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fifOW  RADC-'rR«74-a68*  Rovltllon  of  RADC  No?\- 

H««UAUtUty  Notebook,  D*  F.  Cottvoll,  ot  aI,  Martin 
MAi'iottn  Anrawi^aoei  tinted  October  1074 » Thin  data  la  ahown 
in  1'aUle  i.a-1  nnU  eomi^nrod  with  the  non-oporating  failure  rate 
pmUetlon,  Comparing  the  oo«\mon  environment  (ground)  indioatea 
a non-opevatinq  to  operating  ratio  of  1 i 106, 


TAflhK  2.2 -U  OPlilRATlONAL/NON-OP^RATlONAt  Kl'JLIAOlLITV  COMPARISON 


hNyiiiONMi^NT 

PART  lins. 

(M) 

NO.  OF 
FAIUiRl^S 

FAIbDRK 

UATF  IN  PITS 

'°P/'no 

Non “Opera ting 

Ground,  Pixod 

180,65 

24 

133 

M 

Operating 

Ground 

1.260 

32 

26005 

196. 

Ground,  Mob  ill' 

.012 

2 

333333 

2506. 

Airborne 

14.56 

5413 

371798 

2795. 

Miani U> 

.048 

26 

541C67 

4073. 

Holiooptor 

.255 

65 

254902 

1917. 

2 . i N HocoirirtM'tdationB 

Data  collootod  has  primarily  b©on  J?or  rato  gyros.  The 
d^monat.rated  inLrinsio  sfeorago  failure  rate  for  rate  gyros  is 
near  133  fits.  Data  indiontoa  that  the  non-oporating  reliabil- 
ity of  gyroncopoR  has  improved  in  the  last  ten  years , Sub- 
stantially higher  roliability  for  gyros  in  within  the  state  of 
the  art  but  only  at  a significantly  higher  expense.  Novel 
tochnigiioa  in  development  look  promising  from  a reliability 
atanvipoint . 

Areas  identified  which  are  important  factors  in  gyro 
storage  reliability  are  discussed  below. 

;?.3.i  Spin  bearing  lubrication  - One  program  has  adopted  a 
procedure  of  operating  the  gyro  every  6 months  while  in  storage, 
and  has  incorporated  a spin  detector  so  that  rotation  of  the 
wheel  can  be  verified  easily.  Some  lubricants  are  more  liable 
to  separate  thean  others,  and  selection  of  lubricant  is  important. 
Drying  or  oxidation  arc  other  concerns.  The  lubrication  problem 
can  be  avoided  entirely  by  using  hydrodynamic  spin  bearings, 
which  use  the  fill  gas  as  a lubricant, 

2.3.2  Creep  due  to  temperature  change  - This  effect  appears  be- 
cause it  is  not  possible  to  build  the  gyro  from  a single 
material  - insulators,  conductors,  and  magnetic  materials  are 
used.  Storage  at  constant  temperature  is  a possible  solution, 

2.3.3  Creep  and  dimensional  change  due  to  phase  change  - This 
effect  can  be  thought  of  as  a low  temperature  annealing  pro- 
cess. Possibly  material  selection  could  be  used  to  minimize 
the  effect. 

Both  of  the  creep  effects  can  be  accommodated  by  re- 
balancing the  gyro  as  needed, 

2.3.4  Magnetic  fields  - Since  the  gyro  contains  magnetic 
material,  the  magnetic  environment  needs  to  be  controlled 
also.  Large  fields  will  change  the  permanent  magnetism, 
resulting  in  uncompensated  torqvies.  Mu-metal  shields  may  be 
used  in  high  precision  designs, 
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2.3.S  Adhoaion  - A program  using  gas  bearings  reports  adhesion 
duo  to  high  contact  pressure  when  the  gyro  is  stored  undisturbed. 
The  bearing  matoriol  was  a feivrous  base,  not  ceramic.  A 
possibility  is  to  store  gas  wheel  bearings  with  the  wheel 
spinning  (power  on) . Another  is  to  turn  the  gyro  over 
poriodioally . 

GinU;)al  gas  bearings  could  bo  mechanically  supported  in 
storage,  which  would  also  be  desirable  for  shipping  (shock 
and  vibration) . 

2.«’).6  burn-in  - An  MIT  paper  (Ref.  7,  p.  475)  comments  that 
"A  test  program  . , . (should  bo)  made  equal  to  10  or  15  per- 
cent of  Required  Reliability  Performance  Life."  No  supporting 
data  is  given,  but  an  artificial  example  is  shovm. 
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3.0  Ac  t"  o 1 o r omc  tor  r. 

An  acceleromotoi*  is  designed  using  the  Newtonian  re- 
lation F « itia.  A known  proof  mass,  m,  is  constrained  to 
follow  the  motion  of  the  case  of  the  device  by  mean-s  of 
a constraining  force,  F,  which  is  measured,  whence  the 
acceleration,  ,a,  can  be  calculated.  As  a matter  of  con- 
venience, the  mooouremont  is  often  made  only  along  a single 
axis.  The  coi^straining  force  can  be  provided  in  a number  of 
ways,  Komt!  of  which  are; 

a)  by  a simple  spring.  The  relative  displacement  is 
the  measure  of  the  force.  This  configuration  is 
not  much  used,  because  only  a low  accuracy  is 
possible . 

b)  by  an  unsaturated  electromagnet.  The  current  is 
proportional  to  the  force.  In  some  designs,  the 
current  is  a pulse  of  fixed  magnitude  and  duration, 
a count  of  the  number  of  pulses  is  then  proportional 
to  the  velocity  acquired. 

c)  by  a gyroscope.  The  precession  rate  is  proportional 
to  the  acceleration.  This  configuration  is  usually 
used  with  a servo  to  null  the  precession  angle. 

d)  by  a set  of  taut  wires.  The  tension  in  each  wire 
is  determined  by  using  a pickoff  and  exciter  to 
determine  its  resonant  frequency. 

In  inertial  applications,  the  integral  of  the  accelera- 
tion (velocity  gained)  is  usually  wanted.  If  this  is  done 
within  the  acceleromettir , it  is  termed  an  integrating  accel- 
erometer oj‘  a Velocity  meter. 

3 . 1 Storage  Reliability  Analysis 

3.1.1  Storage  Fa llurc  Rates 

The  best  observed  failure  rate  for  accelerometers  is  29.7 
fits  (failures  per  billion  hours) , with  90%  confidence  that  the 
true  failure  rate  lies  below  59  fits.  Observed  failure  rates 
range  up  to  1923  fits. 
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^ ^ l^^ta  Deticription 

Data  was  received  from  5 sources  and  6 missile  programs 
representing  448.5  million  non-operating  hours  with  196 
failures  reported.  Analysis  of  the  data  indicated  that  the 
data  from  two  missile  programs  could  not  be  used  in  deriving 
a non -ope ratine  failure  rate. 

All  of  the  data  is  shown  in  Table  3.1-1.  Missile  M data 
listed  accelerometer  removals,  however,  no  analysis  was  per- 
formed to  determine  the  actual  number  of  failed  units.  Missile 
T data  recorded  assembly  failures.  The  assemblies  consisted  of 
two  accelerometers,  a roll  free  gyro  and  a roll  corrector.  Data 
was  unavailable  to  determine  which  assembly  failures  were  a re- 
sult of  accelerometer  failures. 

The  remaining  data  includes  137.8  million  non-operating 
hours  with  10  failures  giving  an  average  non-operating  failure 
rate  of  73  fits  (failures  per  billion  hours) . The  failure 
rates  for  sources  indicating  failures  range  from  24  fits  to 
1923  fits. 

Each  data  source  is  discussed  below, 

3.1.2. 1 Source  A Data 

Source  A represents  a reliability  study  performed  under 
contract  to  RADC  in  1974.  This  source  identified  the  type 
and  quality  grades  for  the  devices,  however,  it  provided 
no  information  regarding  storage  conditions  or  individual 
programs . 

3 . 1 . 2 . 2 Source  B Data 

The  storage  data  under  Source  B actually  represents 
standby  data  in  an  orbiting  satellite  environment.  No  failures 
were  indicated  in  110  thousand  accelerometer  standby  hours. 

3 . 1 . 2 . 3 Source  C Data 

Source  C represents  a reliability  study  performed  under 
contract  to  RADC  in  1968.  It  included  2506  devices  stored 
for  an  average  of  5 months.  The  devices  were  missile  hard- 
ware. No  failures  were  reported. 
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TABLE  3.1-1. 


ACCELEROMETER  NON-OPERATING  DATA 


MILLION  PART  FAILURE  RATE 


SOURCE  NO. 

OF  DEVICES 

STORAGE 

HRS.  FAILURES 

IN  FITS 

COMMENT 

A 

- 

3.12 

6 

1923. 

Pendulum 

A 

- 

0.25 

0 

<4000. 

Angular 

A 

- 

0.46 

0 

<2174  . 

Linear 

B 

18 

0.11 

0 

<9091. 

C 

2 50  b 

9.3 

0 

<108. 

M 

115 

4.44 

0 

<225. 

2df  Pen- 

P 

34 

1.30 

1 

769. 

dulum 

MISSILE 

E-1 

1748 

25.521 

0 

<39. 

G 

39 

1.118 

1 

894  . 

H 

1071 

17.015 

1 

59. 

Linear 

H 

2142 

34.029 

0 

<29. 

Angular 

I 

4140 

41.18 

1 

24. 

SUB  TOTAL 

137.843 

10 

73. 

OTHER  DATA 

MISSILE  M 

- 

30.6 

76 

2484. 

76  removal 

MISSILE  T 

6000 

310. 

105 

349  . 

Assy . 

TOTAL 

448.533 

196 

437. 

Failures 

3 . 1 . 2 . 4 Source  M Data 

Source  M represents  spacecraft  accelerometers  which  were 
part  of  systems  stored  in  a controlled  environment.  The  systems 
were  tested  once  per  year  with  no  accelerometer  failures  re- 
ported. Average  age  of  accelerometers  at  last  test  were  5.3 
years  . 


3. 1.2. 5 Source  P Data 


Source  P data  represents  a special  aging  and  surveillance 
program.  Devices  are  stored  in  a controlled  environment.  One 
device  failed  in  a storage  test  at  age  three  months.  No 
failure  analysis  was  available,  however,  the  device  was  listed 
as  not  repairable.  Two  other  devices  failed  tests,  however, 
on  retest,  both  devices  performed  satisfactorily.  At  last 
test,  devices  ranged  in  age  from  1 month  to  74  months.  Average 

age  was  52  months.  No  aging  trends  are  evident  from  the  tests. 

3 . 1 . 2 . 6 Missile  E-1  Data 

Missile  E-1  data  consists  of  874  missiles  stored  for  20 
months.  The  missiles  were  stored  in  contair ers  exposed  to 
external  environmental  conditions  in  the  northeast  U.  S.  They 
were  also  transported  once  from  coast  to  coast.  No  accelerometer 
failures  were  reported  when  tested  at  20  months. 

3 . 1 . 2 . 7 Missile  G Data 

Missile  G data  consists  of  39  missiles  stored  for  periods 
from  28  months  to  56  months  for  an  average  storage  period  of 
39  months.  The  missiles  in  storage  containers  experienced  the 
following  environments:  12  missiles  stored  outside  in  the 
southeast  desert;  12  missiles  stored  outside  in  the  northeast 
U,  S.;  12  missiles  stored  on  the  Gulf  Coast;  and  23  missiles 
stored  in  bunkers  in  the  southeast  U.  S,  One  accelerometer 
failure  has  been  reported  at  age  47  months.  Failure  analysis 
indicated  a failed  thermistor  (possibly  due  to  electrical 
overload) . 

3. 1.2.8  Missile  H Data 

Missile  H data  represents  field  data  from  a recent  army 
missile  program  fielded  in  the  1970 's.  The  major  item  in  which 
the  devices  were  assembled  was  subjected  to  operating  times  at 
high  and  low  temperatures,  shock  and  vibration.  The  missiles 
were  transported  overseas  and  stored  for  various  lengths  of 
time.  No  tests  were  run  until  the  missiles  were  removed  from 
storage  and  returned  to  the  states.  Storage  durations  varied 
from  6 months  to  6 years  with  an  average  time  of  1.8  years. 
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3toraqc  onvi ronmoi^l-.s  included  cannister  time  in  a controlled 
onvironinont , cannister  time  subject  to  outside  elements  and 
missile  time  on  pallets  and  on  launchers.  A number  of  samples 
were  also  run  throuqh  road  tests  under  field  conditions.  One 
linear  accelerometer  failure  was  recorded  at  age  26  months. 

Failure  analysis  indicated  a poor  bond  on  accelerometers 
silicon  beam  (sensing  element) . 

3. 1.2. 9 Missile  .1  Data 

Missile  I data  consists  of  2,070  missiles  stored  for 
periods  Prom  1 month  to  40  months  for  an  average  storage 
period  of  14  months.  Approximately  80  percent  of  the  missiles 
were  stored  in  U.  S.  depots  while  the  remainder  were  stored 
at  various  bases  around  the  country.  One  accelerometer  failure 
was  recorded  at  age  14  months.  No  failure  analysis  was  available. 

3.1.2.10  Missile  M Data 

Missile  M data  represents  a surface-to-surface  missile: 

Data  was  available  on  approximately  13  years  of  depot  repair 
history.  With  30.6  million  hours  exposure,  there  were  76 
accelerometer  removals , however  it  was  not  possible  to  determine 
the  number  that  were  actually  failed  units.  Based  on  gyro 
records  for  the  same  system,  the  failed  units  would  account  for 
only  .5  to  .33  of  the  removals. 

3.1.2.11  Mi^Jy ij  e_  T_ Data 

Missile  T data  represents  a svirface-to-air  missile.  Data 
on  a 3,000  missile  inventory  for  an  average  of  71  months  is 
included.  At  test,  missile  ages  ranged  from  6 months  to  8 
years.  Tiie  missiles,  built  in  the  1954  time  frame,  contained  an 
assembly  with  two  accel  <^romaters , a roll  free  ayro , and  a roll 
coi'.nector.  Data  was  unavailable  to  determine  which  assembly 

f.i  i 1 ui'e:;  W('re  a r<'sult  of  accelerometer  failures. 

^ . 1 . 3 Pa  I .1  liva  1 ua  t i on 

Pooling  data  from  the  useable  soui,\-ei;  results  in  10 
tai  lures  in  137.84  3 million  stor.iqe  hours  giving  a failure 

'file  fnilurr*  r»Ttes  for  those  sources  showing 


r.i ! e of  7 1 fit 


fai  lv»v*'M  to  filH,  A (umt  of  tilqn i f Iv’janw't' 

tvtoHOvilM'U  In  A)HhmuU*n  A)  W(\n  \H'rforwHH\  V.o  loHt  whotUor  n uii\<iU' 
fniUii'o  mil'  v’ouhl  doflrriUo  nlJ  th®  Tho  to«t  indi- 

uAU'd  tl\nt  tluM'o  WAfi  (\  fiiqnif iv’rtiM.  difforonoo  with  one  dntA 
Hot  )uivln«t  A A hjnii’loAntJv  hinhor  fAiluro  I'Af.o,  Thin  dAl-.A  siot. 

WAH  roroovM'd  And  Iho  vc'mAinlnci  «lntA  «ots  rotontod  imUcAtinvj  in’) 
niitul  I’U'AAt  d1  f foronooH, 

'IMn'  j'Ot^lod  dAtA  ii'.  nUown  In  TAb.Vo  i.l-i?  with  nulliou 

ntornno  hourn  And  <<  fniluroa.  Tho  non-oporatlnq  fiailuro  rate 
hnnod  on  tl\<H  data  .in  20.7  fita  with  a OOVv  confidonco  that  tho 
fatluro  rain  in  loan  than  !)0  fita.  The  nvoraqo  aqo  of  tho  pooled 
vhWii  not in  X(>  monthn  v/ith  tlic  oldest  units  boinq  74  months 
old . 

No  Taotorn  can  bo  identified  to  necount  foi*  the  larger  re- 
ported fat Iviro  rate  for  pendulum  aocelorometers  In  Source  A. 

'I'ho  aourcoa  showing  the  lowest  failure  rates  (Missiles  H and  I) 
are  also  tho  newest  systems  in  tho  data  sets,  both  systems  are 
early  .L‘)70  tocd^noloqy. 


TABl-t:  3.i-2. 

POOLKP 

BATA 

SETS 

) 

SOUUCM 

NO.  OF  PF.VTCHS 

MILLION 

STOKAC;!: 

PART 
HRS . 

FAILURES 

FAILURE  RATE 
IN  FITS 

A 

0.25 

0 

<4000  . 

A 

0.46 

0 

<2174  . 

B 

IS 

0.11 

0 

<9091  . 

0 

2 506 

9.3 

0 

<108  . 

M 

115 

4.44 

0 

<225  . 

r 

14 

1.30 

1 

769  . 

MTSSIl,!' 

I'l-l 

174  6 

25.521 

0 

<39  . 

C 

19 

1.118 

1 

894  . 

11 

1 071 

17.015 

1 

59  . 

11 

214  2 

34.029 

0 

<29  . 

1' 

414  0 

41.18 

1 

24  . 

TO'l'AluS 

134.723 

4 

29.7 

.1. 2 /Non-Oporat onal  Kol..inh.i  y CompariBon 

('(poratl onal  Tiilluro  rnto  data  for  nccoleromctors 
was  ox tr acted  from  report  iyV0C-TR-74-2G8 , Revision  of  l^DC 
Nonelectronic  Reliability  Notebook,  D.  F.  Cottrell,  et  al, 

Martin  Marietta  Aerospace,  dated  October,  1974.  This  data 
is  shown  in  Table  3,2-1  audi  compared  with  the  non-opera tint.^ 
failviro  rate  prediot.ion.  Comparing  the  common  environment 
(ground)  indicaia's  a non-operating  to  operating  ratio  of  1;17G8. 

TABI.E  3.2-1  .OPERATION AL/NON-OPERATIONAL  RELIABILITY  COMPARISON 


PAPT  HOURS 
(lo^M 


134.723 


Operating 

Satellite 

Ground 

Ground,  Mobile 
Airborne 


.112 
9.2  34 
.037 
11.07 


NO.  OF 
FAILURES 


FAILURE  RATE 
IN  PITS 


29.7 


op/X 


no 


0 

485 

0 

2619 


<8179 . 
52523. 
<24757 . 
236607. 


275  . 
1768  . 

834  . 
7967. 


3 . 3 Failure  Modes  & Mechanisms 

Reference  8 (p.  56)  contains  a rough  clas.sif ication 
of  accelerometer  failures.  Most  of  the  failures  reported 
there  reflect  a contamination  problem.  The  two  failure 
causes  reported  in  the  non-operating  data  appear  to  be  random 
type  occurrences.  No  aging  trends  have  been  indicated  in  any 
of  the  data. 

3 . 4 Cone  1 u s i o ns  and  Koconunendat  ions 

Accoleromotors  do  not  appear  to  present  >iny  s i.ani  f leant 
reliability  problems  in  storaqe.  The  random  failure:.,  tna..  t.ave 
been  reported  appear  to  1h^  a result  of  slight  weakne:.;;u's  in 
the  parts  in  manufacture  or  in  the  testing  process.  No  aging 
trends  have  been  identified  for  devices  up  to  74  months  in  age. 

The  non-operating  failure  rate  developed  in  this  report 
of  27.9  fits  is  rc'commendcd  as  bi'lng  representat  ive  of  the 
current  teclmoloqy. 
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^ ^ Sy;  itches 

This  section  proaonts  roliobiJity  analysis  and  data  on 
electromechanical  switches.  Switches  are  sometimes  classified 

by  the  actuating  force  (inertial,  pressure,  push,  etc.)  or  by 

• ’ ♦ 

the  mechanical  features  (toggle,  stepping,  rotary,  etc.) 

^ Storage  Reliability  Analysis 
4.1.1  Storage  Failure  Rates 

Storage  data  for  switches  was  collected  showing  65  failures 
in  698.6  million  part  hours.  Predicted  non-operating  failure 
rates  for  various  switch  types  are  given  in  Table  4.1-1.  Also 
included  is  the  90%  conf  lence  limit.  The  true  failure  rate 
should  lie  below  this  limit  with  90%  confidence. 

TABLE  4.1-1.  SWITCHES  NON-OPERATING  FAILURE  RATES 


TYPE 

FAILURE  RATE 

IN  PITS* 

90%  CONFIDENCE 
LIMIT 

General 

82.8 

125.3 

Toggle/Pushbutton 

26.0 

101. 1 

Pressure 

54.2 

108.4 

Thermal 

17.1 

66.6 

Sensitive 

82.6 

125.3 

Stepping 

400. 

1064. 

Manual  Rotary  S5<A 

82.6 

125.3 

Solenoid 

109.3 

17  2.7 

Motor  Driven  S&A 

138.2 

218.5 

Inertial 

66.4 

98.7 

*Failuren  per  billion  hours 
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4.1,2  Davta  Description 

Switch  non-operating  data  was  obtained  from  four  sources 
and  four  missile  programs.  The  data  represents  698.6  million 
switch  non-operating  hours  with  65  failures  reported.  The 
data  broken  out  by  switch  type  is  presented  in  Table  4.1-2.  For 
those  entries  showing  failures,  the  failure  rate  ranges  from 
29.4  fits  (failures  per  billion  hours)  to  1130  fits. 

Each  data  source  is  described  in  detail  below. 

4 . 1 . 2 . 1 Source  A Data 

Source  A represents  a reliability  study  performed  under 
contract  to  RADC  in  1974.  This  source  identified  the  type  and 
quality  grades  for  the  devices,  however,  it  provided  no  informa- 
tion regarding  storage  conditions  or  individual  programs.  Data 
was  available  on  toggle/pushbutton,  pressure,  sensitive,  stepping, 
and  inertial  switches  as  well  as  a "general"  category  of  switches. 
Failures  were  reported  for  pressure  switches  (4  failures  in  48.3 
million  hours);  stepping  switches  (2  failures  in  5 million  hours), 
and  inertial  switches  (9  failures  in  137.1  million  hours).  No 
data  was  given  on  failure  mode  or  mechanisms. 

4. 1.7. 2 Source  C Data 


Source  C represents  a reliabilii^y-study— performed-,  under  . _ 
contract  to  RADC  in  1968.  No  environments  were  provided.  Data 
was  available  on  toggle/pushbutton,  pressure,  thermostatic, 
sensitive  and  inertial  switches  as  well  as  a "general"  category 
of  switches.  Failures  were  reported  for  "general"  switches 
(11  failures  in  89,5  million  hours),  pressure  switches  (10 
failures  in  31  million  hours) , and  inertial  switches  (6  failures 
in  25.3  million  hours).  No  failure  modes  or  mechanisms  were 
provided. 


4 , 1 . 2 . 3 Source  P Data 

Source  P represents  a special  aging  and  surviellance  pro- 
gram. Devices  are  stored  in  a controlled  environment.  Data 
was  available  on  three  types  of  inertial  switches. 
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Tho  first  data  onUry  in  Table  4.1-2  reprusuniw  a 3-c 
switch.  Forty  switches  wore  tested  having!  an  averat-je  atje 
of  64  months  (the  oldest  switch  was  66  months) . No  failures 
were  recorded  on  this  switch. 

The  second  data  entry  for  source  P in  Table  4.1-2  repre- 
sents a safety  inertial  switch.  Forty  switches  were  also 
tested  having  an  average  ago  of  61  months  (the  oldest  switch 
was  67  months) . Two  failures  wore  recorded  with  the  following 
causes  given:  1)  Corrosion  on  shaft  - ago  60  months j 2)  Kscapo- 
ment  mechanism  slippage  - age  56  months.  Six  other  failures 
were  recorded  but  they  were  not  classified  as  catastrophic. 

Four  of  these  wore  classified  as  failure  cause  unknown  (ages:  35. 
37,  56  and  64  months)  and  the  switches  tested  satisfactorily  in 
later  tests.  The  fifth  failure  was  classified  as  "improper 
clearance  between  pinion  gear  and  timing  weight  (age  60  months) 
and  the  sixth  failure  as  "foreign  particle  between  pinion  gear 
and  timing  weight"  (ago  51  months) . Both  switches  tested  satis- 
factorily at  a later  test. 

The  third  data  entry  for  source  P in  Table  4.1-2  represents 
a magnetic  inertial  switch.  Twenty  three  switches  were  tested 
having  an  average  age  of  32  months  (the  oldest  switch  was  33 
months).  No  failures  were  recorded  on  this  switch. 

4 . 1 . 2 . 4 Source  R Data 

Source  R data  represents  a safe  and  arm  (S&A)  switch  as 
analyzed  in  report  LC-76-OR2.  The  inertial  S&A  data  represents 
two  missile  programs.  For  these  switches  acceleration  of  the 
missile  causes  a g-weight  to  move  which  causes  a rotary  switch 
and  a blocking  rotor  to  rotate.  Rotation  of  the  blocking  rotor 
arms  the  igniter  mechanically  by  opening  the  ignition  ports 
between  the  electrical  squibs  and  the  ignition  pellets.  The 
igniter  is  electrically  armed  by  the  rotation  of  the  rotary 
switch,  closing  the  igniter  electric  circuit. 

The  first  inertial  S&A  program  tested  21  switches  with  ages 
ranging  from  45  to  91  months  for  an  average  age  of  65  months. 

No  failures  were  recorded  on  these  switches. 
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TAIU.K  ^.1-3.  SWITCH  N0N«0lMa<A'nNC5  DATA 


SWITCH  SOUUCN 

NO.  OH 

NON -OP.  HRS. 

NO,  OP 

TYl'H  ’ 

DEVICES 

IN  MILLIONS 

PAILURES 

vt  r»Tr— «ti«r 

Uw'Htfral  A 

Wk 

43.328 

0 

C 

6.658 

0 

C 

- 

.U6S 

0 

c 

« 

3.095 

0 

c 

m 

.2418 

0 

c 

«« 

38.688 

4 

c 

m 

37.2 

6 

c 

m 

3j.442 

1_ 

(TOTAl.  CiliNERAL 

132.819 

11 

To<.jglo/ 

Pushbutton  A 

m 

.6(^3 

0 

A 

- 

l.Ol 

0 

c 

.0555 

0 

c 

m 

.3699 

0 

c 

- 

.1775 

0 

c 

- 

1.274 

0 

Miasilo  K-1 

874 

12.76 

0 

Misaiio  V 

240 

5.256 

0 

Missile  U 

1071 

17.0 

1 

(TOTAL  TOGGLE/PUSHBUTTOM 

38.5059 

1 

PreasurG  A 

48.3 

4 

C 

- 

31.001 

10 

Miasile  E-1 

1748 

25.52 

-JL 

(TOTAL  PRESSURE 

104.821 

14 

Thormoatatic  C 

- 

3.699 

0 

C 

- 

.0663 

0 

C 

- 

.111 

0 

Missile  11 

2142 

34.0 

1 

Missile  I 

2070 

20.59 

^ 

(TOTAL  THERMOSTATIC 

58.4663 

1 

Sensitive  A 

- 

1.644 

0 

C 

- 

.3699 

jo 

(TOTAL  SENSITIVE 

2.0139 

0 

Stepping  A 

- 

5.00 

2 

Manual  Rotary 

S&A  R 

101 

3.574 

0 

rAILUHH  RATH 
IN  FITS 

(<23.1) 
(US0.3) 
(^6006.) 
(033. X) 
(0136.) 
103.4 
161.3 

-,JS2aS- 

82.8) 


(0688.) 
(090.) 
(08018.) 
(<2703. ) 
(<5634.) 
(085.) 

(<78.4) 
(<190. ) 

26.0) 

82.8 

322.6 

133.6) 

(<270. 3) 
(<15083.) 
(<9001. ) 
29.4 

-.-i<48.6i 

17.1) 

(<608. 3) 
iS2703^i^ 
(<496. 5) 
400. 


(<280. ) 
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SWITCH  NON-OPERATING  DATA  (cont'd) 


SWITCH 

SOURCE 

NO.  OF 

NON-OP.  HRS. 

NO.  OP 

FAILURE  RATE 

TYPE 

DEVICES 

IN  MILLIONS 

FAILURES 

IN  FITS 

Solonold  Miaaile  X 

Motor  Driven 

8280 

82.36 

9 

109.3 

(SSA) 

R 

2016 

65.104 

9 

138.2 

Inertial 

A 

137.1 

9 

65.6 

C 

M 

25.337 

6 

236.8 

P 

40 

1.07 

0 

(<535. ) 

P 

40 

1.77 

2 

1130. 

P 

23 

.54 

0 

(<1852. ) 

R 

21 

.992 

0 

(<1008. ) 

R 

74 

5.007 

3. 

199.7 

Missile  E-1 

874 

12.76 

0 

('^78. 4) 

Missile  1 

2070 

20.59 

_(<48.6). 

(TOTAL 

INERTIAL 

205.966 

18 

87.4) 
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The  second  inertial  switch  program  tested  74  switches 
with  ages  ranging  from  40  to  138  months  for  an  average  age 
of  93  months.  One  catastrophic  failure  was  recorded  where 
an  improperly  manufactured  cover  plate  caused  the  arming 
socket  to  be  improperly  placed  and  interference  between  the 
rotary  switch  and  the  electrical  contacts  prevented  the  switch 
shaft  from  rotating.  These  switches  were  supposedly  tested 
when  placed  into  the  inventory.  Ten  other  failures  were  re- 
corded as  specification  failures.  Six  failed  to  arm  within 
the  maximum  specified  time  and  four  armed  sooner  than  the 
minimum  specified  time.  These  specification  failures  were 
marginal  and  would  not  have  affected  the  mission.  Causes 
for  two  failures  were  identified s 1)  misaligned  gear  train 
caused  by  two  screws  on  the  g-weight  shafts  being  loose;  and 
2)  improperly  manufactured  cover  plate. 

The  manual  rotary  S&A  data  represents  one  missile  program. 
The  program  tested  101  switches  ranging  in  age  from  9 to  75 
months  with  an  average  age  of  48  months.  No  failures  were 
recorded. 

The  motor  driven  S&A  data  represents  one  missile  program,. 
The  program  tested  2017  switches  ranging  in  age  from  12  months 
to  96  months  with  an  average  age  of  44  months.  Nine  failures 
were  recorded  as  fails  to  arm  or  disarm.  Thirty  five  failures 
were  reported  in  which  arming  times  exceeded  minimum  mission 
requirements.  Note  that  this  program  had  very  stringent  re- 
quirements on  arming  time.  Forty  nine  failures  were  reported 
in  which  arming  or  safing  times  exceeded  original  acceptance 
specifications,  however  did  meet  mission  requirements. 

No  detailed  failure  mechanism  analysis  was  performed, 
however,  age  sensitive  items  were  noted.  These  included 
swelling,  cracking  and  general  materiel  degradation  of  0-rings, 
packing  and  insulators.  Corrosion  of  beeirings,  contacts, 
switch  ports,  gear  assemblies  and  motor  armature  were  also 
postulated.  Load  relaxation  of  helical  compression  springs 
and  bonding  of  friction  plate  clutch  assembly  were  also  noted. 
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Eighty  percent  of  the  failures  involved  long  arming 
times.  An  age  trend  analysis  <fias  performed  on  the  parametric 
data.  The  analysis  indicated  an  average  increase  in  arming 
time  of  13  percent  per  year. 

4 . 1 . 2 . 5 Missile  E-1  Data* 

Missile  E-1  data  consists  of  874  missiles  stored  for  20 
months.  The  missiles  were  stored  in  containers  exposed  to 
external  environmental  conditions  in  the  northeast  U.  S.  They 
were  also  transported  once  from  coast  to  coast.  Data  was 
available  on  toggle,  pressure  and  inertial  switches.  No  failure 
were  recorded. 

4 . 1 . 2 . 6 Missile  F Data 

Missile  F data  consists  of  120  missiles,  60  of  which  were 
stored  for  one  year  and  60  for  two  years.  The  missiles  in 
storage  containers  experienced  the  following  environments: 

30  missiles  stored  outside  in  the  Arctic  on  wooden  racks  with 
canvas  covers;  30  missiles  stored  outside  in  the  southeast 
desert  under  open  sided  metal  roof  sheds;  30  missiles  stored 
outside  in  the  canal  zone  under  open  sided  metal  roof  sheds; 
and  30  missiles  stored  in  the  southeast  U.  S.  in  bunkers.  Data 
was  available  on  toggle  switches.  No  failures  were  reported. 

4. 1.2. 7 Missile  H Data 

Missile  H data  represents  field  data  from  a recent  army 
missile  program  fielded  in  the  1970 ‘s.  The  major  item  in  which 
the  devices  were  assembled  was  subjected  to  operating  times  at 
high  and  low  temperatures,  shock  and  vibration.  The  missiles 
were  transported  overseas  and  stored  for  various  lengths  of 
time.  No  tests  were  run  until  the  missiles  were  removed  from 
storage  and  returned  to  the  states.  Storage  durations  varied 
from  6 months  to  6 years  with  an  average  time  of  1.8  years. 
Storage  environments  included  cannister  time  in  a controlled 
environment,  cannister  time  subject  to  outside  elements  and 
missile  time  on  pallets  and  on  launchers.  A number  of  samples 
were  also  run  through  road  tests  under  field  conditions.  Data 
was  available  on  pushbutton  and  thermostatic  switches.  The  one 
failure  of  a pushbutton  switch  was  recorded  as  a bent  leaf 
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spring  contact.  No  failure  analysis  was  available  on  the 
thermal  switch. 

4. 1.2. 8 N^ssilo  I Data 

Missile  I data  consists  of  2,070  missiles  stored  for 
periods  from  1 months  to  40  months  for  an  average  storage 
period  of  14  months.  Approximately  80  percent  of  the  missiles 
were  stored  in  U.  S.  depots  while  the  remainder  were  stored  at 
various  bases  around  the  country.  Data  was  available  on 
thermostatic,  inertial  and  solenoid  switches.  No  failures 
were  reported  for  the  thermostatic  or  inertial  switches.  Nine 
failures  were  recorded  on  the  solenoid  switches.  No  failure 
analysis  was  available  on  these  switches,  however  the  main 
failure  mode  v,'as  "intermittent." 

4.1.3  Data  Evaluation 

The  data  from  the  various  sources  were  combined  by 
device  type  as  shown  in  Table  4.1-2.  A test  of  significance 
(see  Appendix  A)  was  performed  to  test  whether  there  was  any 
significant  differences  in  the  data  entries  under  each  device 
type.  Two  device  types,  pressure  switches  and  inertial 
switches,  indicated  a significant  difference  within  the  data 
entries . 

For  pressure  switches  the  source  with  the  most  failures, 
source  C,  also  represents  the  oldest  data  (1968  study). 
Therefore,  this  data  entry  was  removed.  The  remaining  entries 
include  4 failures  in  approximately  74  million  hours  with  a 
failure  rate  of  54.2  fits. 

For  inertial  switches,  the  same  data  entry  (Souce  C)  was 
removed  and  the  entries  retested.  The  test  indicated  no  sig- 
nificant differences  within  the  remaining  entries.  These 
entries  include  12  failures  in  approximately  181  million  hours 
with  a failure  rate  of  66.4  fits. 

Two  device  types,  sensitive  and  manual  rotary  S&A,  in- 
dicated no  failures.  It  is  recoimuended  that  the  "general" 
category  failure  rate  be  used  until  further  data  is  collected 
on  these  devices.  The  pooled  switch  data  and  failure  rates  are 
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shown  in  Table 

4.1-3.  The  right  hand 

column  in  Table 

4.1-3  gives 

the  90%  confidence  one-sided 

limit  on 

the  failure  rate 

. The 

true  failure  rate  should  lie 

below  this  limit  with  90% 

confidence . 

TABLE  4.1- 

-3.  POOLED  SWITCH  N0N-( 

OPERATING  DATA 

NON-OP.  HRS. 

NO.  OF 

FAILURE  RATE  90%  CONFIDENCE 

TYPE 

IN  MILLIONS 

FAILURES 

IN  FITS 

ONE-SIDED 

FAILURE  RATE 

General 

132. 819"' 

11 

82.8 

125.3 

Toggle/ 

Pushbutton 

38.506 

1 

26.0 

101.1 

Pressure 

73.82 

4 

54.2 

108.4 

Thermostatic 

58.466 

1 

17.1 

66.6 

Sensitive 

★ 

* 

Stepping 

5.00 

2 

400. 

1064. 

Manual  Rotary 
S&A 

* 

•k 

Solenoid 

82.36 

9 

109.3 

172.7 

Motor  Driven 
S&A 

65.104 

9 

138.2 

218.5 

Inertial 

180.629 

12 

66.4 

98.7 

*Use  "general"  failure  rate. 

4.1.4  Failure  Modes 

Table  4.1-4  summarizes  the  failure  modes  and  mechanisms 
that  were  identified  in  the  non-operating  data.  They  include 
corrosion  of  contacts  and  other  metal  surfaces;  load  relaxation 
of  springs;  aging  of  0-rings,  packing,  etc.,  as  long  term 
mechanisms.  Other  mechanisms  appear  to  be  manufacture  related. 
The  majority  of  these  devices  were  thoroughly  tested  before 
being  placed  into  storage.  The  manufacture  related  defects 
therefore  must  be  marginal  problems  which  escape  these  tests 
and  are  sufficiently  stressed  in  the  storage  environments  to 
result  in  failures. 
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TABLE  4.1-4.  REPORTED  FAILURE  MODES  & MECHANISMS 

IN  STORAGE 


SWITCH  TYPE  FAILURE  MODES  & MECHANISMS 


Inertial 
Inertial 
Inertial 
Inertial 
Inertial 
Inertial 
Motor  Driven 

Motor  Driven 

Motor  Driven 
Motor  Driven 
Pushbutton 


Corrosion 

Mechanism  slippage 
Foreign  particle 
Improper  clearance 

Improperly  manufactured  cover  plate  - 2 
Misaligned  gear  train 

Swelling,  cracking  & general  materiel  degradation 
of  0-rings,  packing  & insulators 

Corrosion  of  bearings,  contacts,  switch  parts,  gear 
assemblies  & motor  armature 

Load  relaxation  of  helical  compression  springs 
Bonding  of  friction  plate  clutch  assembly 
Bent  leaf  spring  contact 


TABLE  4.1-5.  OPERATIONAL 

FAILURE  DISTRIBUTION 

FOR  SWITCHES 

Failure  Mode 

Number  of 

Percentage 

Contamination 

Failures 

5 

1 

Failed  to  operate 

9 

1 

Improper  adjustment 

IG 

2 

Improper  operation 

16 

2 

Intermittent  operation 

72 

10 

Internal  part  failure 

0 

0 

Leaking 

8 

1 

Mechanical  damage 

127 

17 

Mechanical  interference 

56 

7 

Missing  or  wrong  part 

0 

0 

Slow  or  sluggish  operation 

0 

0 

Weak  or  aging  effect 

5 

1 

Arcing 

0 

0 

Drift/uns table/erratic 

42 

6 

Defective  contacts 

12 

2 

Open 

58 

8 

ox  ted 

30 

4 

bpuib  failed  to  fire 

79 

10 

Voltage  out  of  spec 

29 

4 

Dielectric,  humidity 

0 

0 

Unknown 

190 

25 

TOTAL 

754 
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I'ablo  4.1-S  HUIWMI-Uos  talluro  inodo.  oe  switches  in  opora- 
tlenel  enwiroiments.  This  table,  taken  from  data  source  C, 
shews  the  distclbution  of  £ail,^iroa  in  switches,  for  those 
failures  which  could  bo  Idontlfled  quantitatively. 
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^ Operational  Prodiction  Modo.l 

The  MIL-HnBK-217B  qenoral  failure  rate  model  for  switches 
ia  : 


I"e  ='  ”c  "oyo> 


-6 


where:  X - device  failure  rate 

Xj^  base  failure  rate 
Ilg  = ^Environmental  Adjustment  Factor 
= Complexity  Adjustment  Factor 
n = Cycling  Rate  Adjustment  Factor 


The  various  types  of  switches  require  different  failure  rate 
models  that  vary  to  some  degree  from  the  basic  model.  The  specific 
failure  rate  model  and  n factor  values  for  each  group  are  shown  in 
figures  4.2-1  through  4.2-3. 

Figure  4.2-1  contains  the  model  for  snap-action  toggle  or 
pushbutton  switches  covered  by  military  specifications  MlL-S-3950 
and  MIL-S-8805. 

Figure  4.2-2  contains  the  model  for  basic  sensitive  switches 
covered  by  military  specification  MIL-S-8805. 

Figure  4.2-3  contains  the  model  for  rotary,  ceramic  or  glass 
wafer,  silver  alloy  contact  switches  covered  by  military  specifica- 
tion MIL-S-3786. 

The  switch  models  assume  the  following:  the  design  application 
is  according  to  the  part  specification;  the  device  is  protected 
from  dust  with  metal  or  plastic  cases;  either  ac  loads  or  resistive 
dc  loads  are  involved;  and  failure  is  defined  as  a drop  in  contact 
voltage  exceeding  specification  limits. 
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FIGURE  4.2-1.  MIL-HDBK-217B  OPERATIONAL  FAILURE  RATE  PREDICTION 

MODEL  FOR  TOGGLE  OR  PUSHBUTTON  (Single  Body)  SWITCHES 
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‘ ^ Opog^tiQtu\i/Non"Opi3g(\tionail  Failure  Rate  Comparisons 

4.3.1  Sawplt  C<iloulationt  from  Mn>"HDBK*217B 


From  thoao  models  minimum  operation  failure  rates  are 
found  below.  A fixed  ground  environment  in  assumed,  correspondincj 
to  storage  with  unoontrollod  temperature  and  humidity. 

For  a snap-aotion  switch  of  MIL  specification  quality, 

Xj^  » 0.01,  fixed  ground  environment,  Ug  « 1.0,  SPST  contacts, 

U«  ■ 1.0,  and  switohing  rate  less  than  once  per  hour,  n_,_  =»  1.0. 

The  resulting  failure  rate  for  this  switch  is  0.010  f/Mhr,  or 
10  fit. 

For  a sensitive  switch,  actuation  greater  than  0.002  inches, 
MIL  specification  quality,  » 0.0035,  fixed  ground  environment, 

Rg  ■ 1.0,  switching  rate  less  than  once  per  hour,  “ 1.0,  one 

contact f The  resulting  failure  rate  for  this  switch  is  0.404  £/Mhr, 
or  404  fit. 

For  a rotary  switch,  MIL  specification  quality,  « 0.0035, 
fixed  ground  environment,  Hj,  * 1.0,  switching  rate  less  than  once 

per  hour,  ■ 1.0,  two  contacts.*  The  resulting  failure  rate 

for  this  switch  is  0.404  f/Nhr,  or  404  fit. 

4.3.2  Operational  Failure  Rates 

Operational  failure  rates  for  types  of  switches  covered 
by  the  MIL-HDBK**217B  model  are  shown  as  part  of  Table  4.3-1. 

Oporational  failure  rate  data  for  switches  was  extracted 
from  report  RADC-TR-74-268 , Revision  of  RADC  Nonelectronic 
Reliability  Notebook,  D.  P.  Cottrell,  et  al,  Martin  Marietta 
Aerospace,  dated  October  1974.  This  data  is  shown  in  Tables 
4.3-2  through  4.3-9  and  compared  with  the  non-operating 
failure  rate  prediction. 

4.3.3  Comparison  of  Operational  and  Storage  Failure  Rates 

Tables  4.3-1  and  4.3-9  show  the  comparison  between  the 

operational  failure  rates  and  the  storage  failure  rates.  The 
M1L-UDBK-217B  comparison  indicates  a higher  failure  rate  in 
storage  than  in  operation  for  toggle  switches.  For  rotary 
and  sensitive  switches,  the  non-operating  to  operating  ratio 
is  1:9. 
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Comparing  the  common  environment  (ground)  in  the  other 
data  source,  the  non~operating  to  operating  ratio  ranges  from 
l!9  for  the  general  category  of  switches  to  1:147  for  thermo- 
static switches. 


TABLE  4.3-1.  OPERATIONAL  FAILURE  RATES  BASED  ON 

MIL-HDBK-217B 


SWITCH  TYPE 

GROUND  FIXED  ENVIRONMENT 

X IN  FITS 

RATIO  OPERATING/ 
NON-OPERATING 

Toggle 

10 

.4 

Sensitive 

404 

5. 

Relay 

404 

5. 
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TABLE  4.3-2.  OPERATIONAL/NON-OPERATIONAL  WSLIABILITY 
COMPARISON  - SWITCHES > GENERAL 


PART  HRS. 

(10<i) 

NO,  OP 
FAILURES 

FAILURE  RATE 
IN  FITS 

Environment 

Non-Operating 
Ground , Fixed 
Operating 

132.819 

11 

82.8 

•M 

Satellite 

7.880 

4 

507.6 

6 . 

Ground 

1.347 

0 

(<742. 4) 

9. 

Airborne 

10.279 

1100 

107014. 

1292. 

Helicopter 

3.528 

348 

98639. 

1191. 

Submarine 

3.952 

2 

506.1 

6. 

TABLE  4.3- 

3. OPERATIONAL/NON-OPERATIONAL  RELIABILITY 
COMPARISON  - SWITCHES,  PRESSURE 

PART  HRS. 
(106) 

NO.  OP 
FAILURES 

FAILURE  RATE 
IN  FITS 

Environment 

Non-Operating 

Ground,  Fixed 

73.82 

4 

54.2 

- 

Operating 

Ground 

47.741 

100 

2095. 

39 

Ground,  Mobile 

17.184 

105 

6110. 

113 

Airborne 

34.425 

1929 

56035. 

1034 

Helicopter 

1.047 

348 

332378. 

6132 

Submarine 

.613 

4 

6525. 

120 

Shipboard 

.798 

18 

22556. 

416 

TAfiLB  4.3-4,  OPKHATXONAVNON-OPSRATIONAL  RBLIAUIMTV 
COMPARtSQM  ■ SWITCHBS,  PUSHBUTTON 


PAHT.HRS. 
110«)  _ 

NO.  OP 
FAILURES 

FAILURE  RATE 
IN  FITS 

^nvlronmont 

Non- Operating 

»»  ■ 

Ground,  FlxeU 
Operating 

38.506 

1 

26.0 

■ 

Ground 

22.184 

6 

270.5 

10. 

Airborne 

3.624 

101 

27870. 

1072. 

Helicopter 

1.286 

0 

(<777. 6) 

30. 

Submarine 

89.879 

7 

77.9 

3. 

Shipboard 

120.156 

55 

457.7 

18. 

TABLE  4 

.3-5.  OPERATIONAL/NON-OPERATIONAL 
COMPARISON  - SWITCHES,  ROTARY 

RELIABILITY 

PART  HRS. 
(106) 

NO.  OF 
FAILURES 

FAILURE  RATE 
IN  PITS 

Environment 

Non-Operating 
Ground,  Fixed 
Operating 

- 

- 

82.8 

- 

Satellite 

2.391 

1 

418.2 

5 

Ground 

36.108 

48 

1329. 

16 

Airborne 

14.749 

261 

17696. 

214 

Helicopter 

.092 

2 

21739. 

263 

Submarine 

20.204 

32 

1584  . 

19 

Shipboard 

52.097 

80 

1536. 

19 
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TABLIS  4.3-6.  01>fiRAT10NAL/N0N-0PERATI0NAL  RELIABILITV 
COMPARISON  - SWITCHES,  SENSITIVE 


PART  HRS. 
(10<>) 

NO.  OP 
FAILURES 

FAILURE  RATE 
IN  PITS 

Environment 

Non-Operatlmj 
Ground,  Fixed 
Operating 

m 

- 

82.8 

Ground 

11.472 

13 

1133. 

14. 

Airborne 

12.560 

184 

14650. 

177. 

Helicopter 

.610 

3 

4918. 

59. 

Submarine 

45.927 

51 

1110. 

13. 

Missile 

.008 

2 

250000. 

3019. 

TABLE 

4 . 3-7.  OPERATIONAL/NON-OPERATIONAL  RELIABILITY 
COMPARISON  - SWITCHES,  STEPPING 

PART  HRS. 
(106) 

NO.  OF 
FAILURES 

FAILURE  BATE 
IN  PITS 

Environment 

Non-Operating 
Ground,  Fixed 
Operating 

5.00 

2 

400. 

- 

Submarine 

.234 

5 

21368. 

53. 

TABLE  4.3-8.  OPERATIONAL/NON-OPERATIONAL  RELIABILITY 
COMPARISON  - SWITCHES,  THERMOST.^TIC 


PART^HRS. 

NO.  OF 

FAILURE  RATE 

^op/x 

no 

(10®) 

FAILURES 

IN  FITS 

Environment 

Non-Operating 


Ground,  Fixed 

Operating 

58.466 

1 

17.1 

Ground 

4.381 

11 

2511. 

147. 

Airborne  • 

6.733 

44 

6535. 

382  . 

Helicopter 

.218 

9 

41284. 

2414. 

Submarine 

1.838 

7 

3808. 

223. 

Shipboard 

45.767 

29 

633.6 

37. 
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TABLE  4,3-9.  OPERATIONAL/NON-OPERATIONAL  RELIABILITY 
COMPARISON  - SWITCHES,  TOGGLE 


PART  HRS. 
(106) 

NO.  OF 
FAILURES 

FAILURE  RATE 
IN  FITS 

^°P/^no 

Environment 

Non-Operating 

Ground,  Fixed 

38.506 

1 

26.0 

- 

Operating 

Ground 

237.545 

135 

568.3 

22. 

Ground, Mobile 

.359 

1 

2786. 

107. 

Airborne 

35.446 

255 

7194. 

277. 

Helicopter 

.430 

8 

18605. 

716. 

Shipboard 

141.438 

67 

474. 

18. 
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5.0  Relays 

The  term  relay  implies  that  the  voltage  interrupted  at  the 
contacts  is  not  high,  i.e.,  not  over  300  volts.  Devices  which 
interrupt  high  voltages  are  termed  contactors  or  circuit  breakers , 
and  have  special  arrangments  for  extinguishing  the  arc. 

Common  electromagnetic  relay  construction  includes  the 
contacts,  pigtail,  armature,  springs,  magnetic  core  and  coil. 

Contacts  have  three  functions  which  should  be  distinguished, 
namely,  making,  breaking,  and  carrying  the  load  current.  Making 
current  may  be  several  times  the  load  current. 

Where  possible,  contacts  are  designed  to  have  snap-action, 
which  means  that  the  contacts  are  under  a positive  pressure  when 
closed,  and  separated  by  a definite  distance  when  open. 

Where  current  must  be  brought  to  a movable  contact,  a soft 
copper  stranded  wire  wound  in  a spring  shape  called  a pigtail  is 
often  used.  The  use  of  a pigtail  can  be  avoided  by  using  a double 
movable  contact  which  bridges  a pair  of  stationary  contacts. 

The  Inertia  of  the  armature  is  a significant  factor  in  the 
opening  and  closing  rate.  For  resistance  to  shock  and  vibration, 
the  armature  is  made  symmetrical  about  the  hinge,  so  that  torques 
are  not  produced  about  the  hinge  by  linear  accelerations. 

The  retract  spring  supplies  all  of  the  contact  force  for 
the  normally  closed  contacts,  and  also  tends  to  prevent  shock 
and  vibration  from  disturbing  the  contacts.  The  opening  force 
is  partly  from  the  retract  spring,  but  primarily  from  the  contact 
spring . 

A great  variety  of  special  features  and  construction  are 
available.  Latching  and  time  delay  are  common  features,  and 
the  reed  construction  has  advantages  for  some  applications.  , 
Besides  the  electromagnetic  relay  considered  here,  a 
large  class  of  devices  can  perform  the  relay  function.  These 
are  called  static  relays,  because  they  do  not  have  the  moving 
contacts  of  the  electromagnetic  relay.  The  term  static  relay 
includes  several  types  of  device,  such  as  photoconductors, 
silicon  controlled  rectifiers,  vacuum  tubes,  magnetic  ampli- 
fiers, and  transistors.  An  equivalent  exists  based  on  each 
of  these  devices. 
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Fluidic  devices  are  able  to  perforro  logic  and  switching, 
and  the  input  sensors  and  output  drives  can  often  be  de- 
signed to  use  the  same  fluid  power  supply.  Response  times  on 
the  order  of  one  millisecond  are  typical,  and  radiation 
hardening  is  not  a problem. 

Snap  action  requires  either  regenerative  elements,  such 
as  the  controlled  rectifier,  the  unijunction,  the  four  layer 
diode,  and  the  tunnel  diode;  or  regnerative  circuitry,  such 
as  the  blocking  oscillator,  the  Schmitt  trigger,  and  the 
bistable  multivibrator. 

In  general,  to  attain  specific  features  such  as  isola- 
tion or  suppression  of  voltage  spikes  in  a static  circuit 
requires  additional  complexity.  Most  of  the  static  devices 
are  very  fast  compared  to  electromagnetic  relays,  which  usually 
require  a few  milliseconds  to  transfer.  Saturable  core  devices 
are  comparatively  slow,  however,  the  fastest  response  being  a 
half  cycle  of  the  drive  frequency,  typically  1000  hertz  or 
less.  Multipole  switching  with  static  devices  generally  re- 
quires duplication  of  the  output  circuitry.  There  is  usually 
some  consumption  of  power  in  both  states  of  a static  switch. 

5 . 1 Storage  Reliability  Analysis 

5.1.1  Failure  Mechanisms 

There  was  no  storage  failure  mode  information  in  the  available 
data.  The  commonest  operational  failure  mode  is  open  or 
intermittent  contacts  caused  by  contamination,  usually 
particulate,  of  the  contacts.  Sticking  contacts  is  the 
next  most  common  operational  failure  mode,  and  is  caused  by 
either  hot  or  cold  welding. 

5 . 1 . 1 . 1 Contact  Problems 

A number  of  phenomena  take  place  at  the  contacts,  some  of 
which  tend  to  provide  a wearout  mechanism  in  the  reliability 
sense.  A common  life  expectancy  is  one  million  operations, 
but  the  dry  reed  types  run  to  500  million,  and  mercury  wetted 
types  above  that. 

5. 1.1. 1.1  Current  Carrying 

A metal  exposed  to  air  will  quickly  be  covered  with  a 
film  of  oxide  or  adsorbed  oxygen.  If  the  film  is  thick,  it 
will  be  practically  insulating;  if  thin,  it  will  be  permeable 
to  electrons  by  means  of  the  tunnel  effect. 
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Wlu>ii  two  «v»oh  mwtal  svirfacou  are  profjsed  together/  only 
« jxuM  lon  of  the  Bv\rf«coa  carries  the  mechanical  load.  Be- 
cause of  the  surface  roughnesa  of  even  polished  surfaces, 
there  will  be  small  regions  of  pl^istic  deformation  as  well  as 
larger  regions  of  elastic  deformation.  In  parts  of  the  regions 
of  plantic  deformation  tho  .‘'urfaco  film  will  be  separated  and 
motal-to-metnl  contact  will  occur.  These  isolated  spots  account 
for  moat  of  the  '\loctrical  conductivity  of  tho  contact.  These 
apottt  are  alw.vys  cold-woldod,  but  the  elastic  forces  help  to 
break  tho  weld  on  opening.  The  influence  of  the  surface 
filma  in  iimitincf  cold  welding  and  friction  is  desirable, 
and  lubrication  may  be  added  to  electrical  contacts  for  this 
purpose.  For  tho  same  reason,  oxygon  should  be  present  if 
tho  cont^iC:ta  are  within  a sealed  enclosure. 

If  more  than  a few  volts  are  applied,  another  mechanism, 
called  fritting,  croatets  motal-to-metal  contact.  Fritting 
is  a result  of  metallic  ion  migration  due  to  electrostatic 
fields  at  tho  metal-film  interface.  It  can  both  expand 
existing  coj\tact  spots  and  create  now  ones. 

Because  the  equations  for  heat  conduction  and  for  electri- 
cal conduction  are  similar,  there  is  a fixed  relation  between 
tho  voltage  drop  across  a contact  and  tho  maximum  temperature 
attained  witliin  it.  Table  li.l-l  shows  values  for  some  common 
contact  materials.  Softening  refers  to  annealing,  which  takes 
place  belov\»  tlie  melting  point.  The  required  voltages  arc 
quite  low,  so  that  the  corresponding  phenomena  can  be  expected 
in  most  pra>.  . Leal  circuits.  A "dry"  circuit  is  one  in  whic’i 
the  voltages  are  too  low  for  any  of  these  phenomena. 

Table  5.1-1.  Critical  Voltages  for  Some 
Coinmon  Contact  Materials 

.SOFTENING  MEI/l'ING  BOILING 


MATE  HI  AI. 

VOJ^AGE 

voltac;f 

yoj^’Ac 

Ag 

S liver 

0.09 

0.37 

0.75 

Au 

Gold 

0.08 

0.43 

0.9 

CU 

Copptvr 

0.12 

0.48 

0 . 8 

Pt 

Platinum 

0.25 

0.7,1 

1.3 

W 

Wo 1 f ram 

0.6 

1.1 

2.1 
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5. 1.1. 1.2  Closing 

As  the  contacts  close,  the  voltage  stress  rises  until  the 
breaks  down.  Thus,  there  is  usually  a brief  discharge  on 
closing.  For  10  volts  across  the  gap,  breakdown  occurs  at  about 
0.0001  \mn  in  air.  There  is  usually  some  contact  bounce  at 
closure,  which  can  produce  arcing  and  welding.  Inrush  currents 
can  be  far  higher  than  steady  state  currents,  factors  of  10  to 
20  are  not  uncommon.  Many  things  can  be  done  to  minimize  the 
effects:  multiple  contacts  will  prevent  an  arc  forming  as  long 
as  one  of  them  is  closed,  cadmium  and  tungsten  are  resistant  to 
welding,  the  mechanism  can  be  designed  with  leverage  to  break 
the  welds,  and  circuit  modification  is  a possibility. 

5. 1.1. 1.3  Opening 

There  are  two  major  processes  of  material  transfer  across 
the  contacts,  both  occur  during  the  opening  process.  As  the 
contacts  begin  to  open,  a bridge  of  molten  metal  is  formed, 
unless  the  contact  voltage  is  very  low.  As  this  bridge  is  drawn 
out,  it  eventually  separates.  The  separation  is  usually  due  to 
boiling  of  the  metal  at  the  hottest  point,  but  sometimes  due  to 
surface  tension.  The  heating  is  usually  unsymmetrical  so  that 
there  is  a net  transfer  of  material. 

After  the  bridge  breaks,  arcing  will  occur  if  sufficient 
voltage  and  current  are  available.  The  requirements  are  quite 
low;  about  9 volts  and  under  0.5  ampere,  depending  somewhat  on 
the  material  of  the  contacts  and  the  atmosphere.  Arcing  is 
characterized  by  intense  heating  of  very  small  spots  on  the  con- 
tacts and  conduction  thru  an  ionized  plasma.  Materiaa.  .loss  aopena 
on  the  temperatures  attained.  Curiously,  arcs  in  air  lose  inuo'r. 
less  material  than  arcs  in  vacuum;  the  reason  is  that  the  cathode 
spot  is  much  larger  and  cooler  because  t.he  oxygen  lowers  the  work 
function  at  the  cathode  surface.  Come  rtaterials  with  a high 
nudting  point  , notably  wolfram  (tvmgsten)  and  carbon,  are  able  to 
support  an  arc  withovit  melting,  and  material  loss  is  thus  reduced. 


5. 1.1. 1.4  Contact  Materials 

The  choice  of  contact  material  depends  on  the  duty  re- 
quired. Usually  both  contacts  are  made  of  the  same  material. 

The  use  of  different  materials  introduces  thermoelectric  effects 
because  of  the  high  temperatures  at  the  contact. 

For  very  low  voltages  and  currents,  it  is  important  that 
the  contact  material  be  free  of  corrosion  and  not  form  an  in- 
sulating film.  Cold  is  the  most  satisfactory  material,  metals 
in  the  platinum  group  are  also  used. 

For  light  and  moderate  duty,  silver  or  a silver  alloy  is 
the  most  satisfactory  material.  The  oxide  tarnish,  although 
readily  visible,  is  conducting.  (In  atmospheres  containing  suf- 
fer, however,  a nonconducting  sulfide  is  formed  which  is  a serious 
problem.)  High  conductivity  of  the  bulk  material,  softness,  and  low 
melting  point,  all  help  to  insure  a low  resistance  contact  with 
moderate  contact  force. 

For  heavy  duty,  where  arcing  is  the  chief  concern,  a high 
melting  point  is  the  prime  consideration.  Wolfram,  molybdenum,  and 
carbon  are  able  to  sustain  an  arc  without  reaching  their  melting 
point  (sufficient  thermionic  emission  occurs  at  temperatures  be- 
low their  melting  point) . 

Mercury  provides  a contact  material  that  is  not  damaged 
by  arcing.  Designs  in  which  the  liquid  requires  a fixed  position 
are  not  suited  for  applications  where  shock  and  vibration  are 
problems.  By  using  thin  films  in  which  surface  tension  is  the 
dominant  force,  devices  which  can  be  mounted  in  any  position  and 
will  withstand  moderate  acceleration  (5  G)  in  any  direction  have 
been  constructed.  Designs  using  liquid  mercury  cannot  be  used 
below  the  freezing  point,  -40°C. 

The  common  conductors  are  unsatisfactory  as  contacts. 

Copper  tends  to  weld,  and  is  readily  damaged  by  arcing.  Alumi- 
num forms  a thick,  tough  insulating  film  of  oxide,  and  is  one 
of  the  few  metals  which  ciroop  indefinitely  at  room  temperature, 
so  that  it  is  difficult  to  maintain  contact  force. 
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Table  5.1-2  is  a classlfioation  of  the  duty  ifttqui)r«n\enta . 
The  terniinology  is  not  standardized , despite  several  attempts » 
by  standardizing  bodies,  so  this  digure  is  illustrative  rather 
than  definitive. 

5 • 1 • 2 Non-Operational  Failure  Rate 

The  storage  failure  rate  for  all  typos  of  relays  is  8.5 
failures  per  billion  hours.  The  90%  oonfidenoo  limit  is  17.0 
failures  per  billion  hours. 

5,1.3  Data  Description 

Data  was  received  from  four  sources  and  three  missile 
programs  representing  2085.7  million  part  non-operating 
hours  with  45  failures  reported.  Table  5.1-3  suimnarizes  tho 
relay  data  from  each  source. 

The  data  in  Source  A contained  data  from  Source  C.  A 
comparison  was  performed  which  identified  common  data  between 
the  two  sources.  Data  was  removed  from  Source  A to  avoid 
duplication.  The  hours  and  failures  in  parenthesis  below 
Source  A data  represents  total  Source  A data  while  the  hours 
and  failures  listed  on  the  same  line  represents  unique  data 
to  Source  A. 

The  data  represents  a wide  variety  of  devices.  Failure 
rates  for  individual  devices  rang-'  Trom  8.7  fits  (failures 
per  billion  hours)  to  637  fits.  The  overall  failure  rate 
is  20.2  fits. 

Table  5.1-4  through  5.1-10  presents  data  from  each  source 
identifying  the  type  of  relay  where  available.  Each  data 
source  is  described  below. 

5 . 1 . 3 . 1 Source  A Data 

Source  A represents  a reliability  study  performed  under 
contract  to  RADC  in  1974.  This  source  identified  the  type 
and  quality  grades  for  the  devices,  however,  it  provided 
no  information  regarding  storage  conditions  or  individual 
programs.  Data  for  the  device  types  which  are  in  parenthesis 
in  Table  5.1-4  is  a duplication  of  data  from  Source  C in  Table 
5.1-6. 
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6 . 1 . 3 ,  a aauyee  a Baba 

aati  undtr  Source  a octUAlly  raprctenti 
sum\by  In  an  orbiting  tAtellito  environment.  One 
laiiure  wee  indioeted  in  7«46  million  relay  atendby  houre. 
a . I . i . 3 ' Source  C Petii 

Source  G date  repreeenta  a reliability  atudy  performed 
under  contract  to  RADG  in  196S«  No  environments  wore  pro- 
vided. ror  approxinxately  643  million  relay  non-operating 
houre,  20  failurea  were  reported.  The  data  inoludee  non- 
operating hours  on  a number  of  different  types  of  relaya 
The  failurea,  however,  were  recorded  against  relays  foi 
which  the  type  was  not  identified. 

!i . 1 . 3 . 4 Source 

Source  P represents  a special  aging  and  eurvoillance  pro- 
gram. Devices  are  stored  in  a controlled  environment.  The 
data  included  42  holding  relays  stored  for  an  average  age  of 
66  months  (the  oldest  unit  was  71  months)  and  39  latching  re- 
lays stored  for  an  average  age  of  S5  months  (the  oldest  unit 
was  60  months). 

One  latching  relay  failed  at  test  age  20  months.  No 
failure  analysis  was  available,  however,  a retest  by  the  manu- 
facturer could  not  duplicate  the  failure. 

3 . 1 . 3 . 5 M.iaailo  K-1  Data 

Missile  tS-1  data  concists  of  874  missiles  stored  for  20 
months.  The  missiles  were  stored  in  oontainers  exposed  to 
external  environmental  oonditions  in  the  northeast  u.  s. 

They  were  also  transported  once  from  coast  to  coast.  The 
data  included  throe  types  of  relays t DPDT,  rotary  motor  and 
thermal,  ivo  failures  were  recorded  on  the  rotary  motor  relays. 

3 . 1 . 3 . Cl  Mj.asile  C Data 

Missile  G data  consists  of  39  missiles  stored  for  periods 
from  28  months  to  56  months  for  an  average  storage  period  of 
39  months.  The  missiles  in  storage  containers  experienced 
the  following  environments t 12  missiles  stored  outside  in  the 
southeast  desert;  12  missiles  stored  outside  in  the  northeast 


3-8 


r 

I 

1 

1 

U.  S.;  12  missiles  stored  on  the  Gulf  Coast;  and  23  missiles 
stored  in  bunkers  in  the  southeast  u.  S.  No  failures  were 
recorded  for  the  armature  relays. 


\- 
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5.1.3.7  Missile  I Data 

Missile  I data  consists  of  2,010  missiles  stored  for 


periods 

from  1 month 

to  40  months  for 

an  average 

storage 

period  of  14  months. 

Approximately  80 

percent  of  the  missiles 

were  stored  in  u.  S. 

depots  while  the 

remainder 

were  stored  at 

various 

bases  around 

the  country . Two 

failures 

were  recorded 

in  armature  relays  at 

test  age  8 months  and  age 

12  months. 

TABLE  5.1-3. 

NON-OPERATING  DATA  SUMMARY 

MILLION 

FAILURE  RATE 

SOURCE 

PART  NON-OPER.  NO.  OF  FAILURES 

IN  FITS 

HRS. 

A 

165.793 

0 

(<6.0) 

(797.111) 

(19) 

B 

7.46 

1 

134.0 

C 

642.109 

20 

31.1 

P 

3.59 

1 

278.6 

MISSILE 

E-1 

382.812 

2 

5.2 

G 

4.5 

0 

(<222. 2) 

I 

82.36 

2 

24.3 

TOTALS  1288.624 

26 

20.2 

(2085.734) 

(45) 
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TABLE  5.1-4.  SOURCE 

A DATA 

DEVICE  TYPE 

NON-OPER.  HRS. 

IN  MILLIONS  NO. 

OF  FAILURES 

FAILURE  RATE 
IN  FITS 

(General) 

(587.4) 

(19) 

(32.3) 

General , Sub 

144.1 

0 

(<6.9) 

(Crystal  Can, 
Latching) 

(43.46) 

(0) 

(<23.0) 

Latching,  Gen 

12.33 

0 

(<81.1) 

(Thermal) 

(0.458) 

(0) 

(<2183. ) 

Non-Latching, 

General 

9.363 

0 

(<107. ) 

TABLE  5.1-5.  SOURCE  B DATA 

DEVICE  TYPE  NO.  OF  DEVICES  NON-OPER.  HRS.  NO.  OP  FAILURE  RATE 

IN  MILLIONS  FAILURES  IN  FITS 

1912  7.46  1 134.0 
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TABLE  5. 1-6. SOURCE  C NON-OPERATING  DATA 


DEVICE  TYPE 

NON-OPER.  HRS. 

FAILUP.E  RATE 

IN  MILLIONS  NO 

. OR 

FAILURES 

IN  FITS 

Microminiature 

.1168 

0 

(<8562) 

Miniature 

.7244 

0 

(<1380) 

Rotary 

.164 

0 

^<6098) 

Solenoid 

.370 

0 

(<2703) 

Sw.-  2 pole 

.318 

0 

(<3145) 

Thermal 

.458 

0 

(<2183) 

Goldplated-4 

pole 

79.0 

0 

(<12.7) 

Armature 

.322 

0 

(<3106) 

II 

.0658 

0 

(<15198) 

It 

.8510 

0 

(<1175) 

II 

1.2604 

0 

(<793) 

It 

.3699 

0 

(<2703) 

II 

9.6177 

0 

(<104) 

II 

5.1564 

0 

(<194) 

II 

2.6460 

0 

(<378) 

II 

1.8096 

0 

(<535) 

Crystal  Can 

1.0562 

0 

(<947) 

II  II 

9.9152 

0 

(<101) 

II  II 

1.0168 

0 

(<983) 

II  II 

2.6577 

0 

(<376) 

n II 

27.872 

0 

<<36) 

II  II 

.0728 

0 

(<13736) 

It  M 

.8792 

0 

(<1137) 

- 

1.85 

0 

(<541) 

mi 

12.576 

0 

(<80) 

- 

3.050 

0 

(<328) 

- 

37.688 

0 

(<27) 

- 

12.207 

0 

(<82) 

- 

128. 

3 

23.4 

- 

281. 

15 

53.4 

- 

9.982 

1 

100.2 

8.976 

1 

111.4 

TABLE  5. 1-7. SOURCE  P 

DATA 

DEVICE  TYPE 

NO. 

OF  NON-OPER.  HRS. 

NO 

. OF 

FAILURE  RATE 

DEVICES  IN  MILLIONS 

FAIIT’RES 

IN  FITS 

Holding 

42 

2.02 

0 

(<495) 

Latching 

39 

1.57 

1 

637. 
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TABLE  5. 1-8.  MISSILE  £-1  DATA 


DEVICE  TYPE 

NO.  OP 
DEVICES 

NON-OPER.  HRS, 
IN  MILLIONS 

NO.  OP 
FAILURES 

FAILURE  RATE 
IN  PITS 

DPDT 

6118 

89.323 

0 

(<11.) 

Rotary  Motor 

15732 

229.687 

2 

8.7 

Thermal 

4370 

63.802 

0 

(<16.) 

TABLE 

5. 1-9. MISSILE  G 

DATA 

DEVICE  TYPE 

NO.  OP 
DEVICES 

NON-OPER.  HRS. 
IN  MILLIONS 

NO.  OP 
FAILURES 

FAILURE  RATE 
IN  PITS 

Armature 

156 

4.5 

0 

(<222) 

TABLE 

5.1-10.  MISSILE 

I JJiATA 

DEVICE  TYPE 

NO.  OP 
DEVICES 

NON-OPER.  HRS. 
IN  MILLIONS 

NO.  OF 
FAILURES 

FAILURE  RATE 
IN  PITS 

- 

2070 

20.59 

0 

(<49.) 

Armature 

6210 

61.77 

2 

32. 
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5.1.4  Data  Evaluation 


The  data  from  the  various  sources  was  combined  by  device 
type.  Only  three  relay  types  plus  the  general  category  re- 
ported failures.  The  resulting  failure  rates  range  from  8.7 
fits  for  rotary  relays  with  two  failures  reported  to  71.9  fits 
for  latching  relays  with  one  failure  reported. 

Since  the  failure  rates  by  device  type  represent  a very 
small  number  of  failures  except  for  the  general  category  a 
test  of  significance  (described  in  Appendix  A)  was  performed 
to  test  whether  a single  failure  rate  could  describe  all  the 
relay  types  that  showed  failures.  The  test  indicated  that 
there  was  no  significant  difference.  The  combined  data  for  all 
relay  types  showing  failures  including  the  "general"  type 
represents  833.4  non-operating  hours  with  26  failures  giving 
a pooled  failure  rate  of  31.2  fits. 

Next  a test  was  performed  to  pool  all  relay  data  (including  0 
failure  data)  into  a single  general  relay  category.  This  test 
indicated  there  was  a significant  difference  when  the  0 failure 
cases  were  included. 

Since  the  failure  data  by  device  type  was  insufficient 
to  determine  differences.  The  data  was  broken  out  again  by 
source  and  regrouped.  All  relay  data  from  missile  programs 
were  placed  in  one  group  and  the  other  sources  into  a second 
group.  These  pooled  data  groups  were  tested  and  no  significant 
differences  were  measured  within  the  groups.  The  pooled  data  is 
shown  in  Table  5.1-12. 

In  Table  5.1-12  the  data  under  group  1 gives  a failure  rate 
of  26.9  fits  with  a 90%  confidence  that  the  true  failure  rate 
is  below  35.7  fits.  Group  2 gives  a failure  rate  of  8.5  fits 
with  a 90%  confidence  that  the  true  failure  rate  is  below  17.0 
fits. 

The  missile  sources  represent  newer  devices  than  the  other 
sources.  Until  sufficient  data  becomes  available  to  distinguish 
between  relay  types,  it  is  recommended  that  the  non-operating 
failure  rate  of  8.5  fits  be  used  to  represent  the  best  case  for 
a "general"  relay  category  within  the  current  state-of-the-art. 
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TABLE  5.1-11.  NON-OPERATING  DATA  BY  RELAY  TYPE 


TYPE 


NON-OPERATING  STORAGE 

HRS.  IN  MILLIONS  FAILURES 


FAILURE  RATE 

. in:fits 


General  523,379 

General,  Sub  144.1 

Latching,  Gen.  13.9 

Non-Latching,  Gen  9.363 

Microminiature  .1168 

Miniature  .7244 

Rotary  229.851 

Solenoid  .370 

Sw.  - 2 pole  .318 

Thermal  64.260 

Goldplated  4 pole  79.0 

Armature  22.1588 

Crystal  Can  43.4699 

Holding  2.02 

DPDT  89.323 

Armature  66.27 


21 

0 

1 

0 

0 

0 

2 

0 

0 

0 

0 

0 

0 

0 

0 

2 


40.1 
(<6.9) 

71  9 
(<106!8) 
(<8561.6) 
(<1380.5) 
8*7 
(<2702*.7) 
(<3444. 7) 
(<15.6) 
(<12.7) 
{<45.1) 
(<23.0) 
(<495. 0) 
(<11.2) 

30.2 


TABLE  5.1-12.  POOLED  DATA  GROUPS 


SOURCE 


NON-OPER.  HRS'.  NO.  OP  FAILURE  RATE 

IN  MILLIONS  FAILURES  IN  FITS 


A 

B 

C 

P 


165.763 

7.46 

642.109 

3.59 


0 (<6.0) 

1 134.0 

20  31.1 

1 278.6 


TOTALS 
GROUP  2 

MISSILE 

E-1 

G 

I 


818.952 


382.812 

4.5 

82.36 


22  26.9 


2 5.2 
0 (<222. 2) 
2 24.3 


TOTALS  469.672 


8.5 


5-14 


5.2  Relay  Operational  Failure  Rate  Model 

The  MIL-HDBK-217B  failures  rate  model  for  relays  is: 

S ” *b  '"e  * "c  * "cyo  * "p> 

>b  ■ ‘t  ‘“l* 

where:  \ « device  failure  rate 

P 

Xj^  e base  failure  rate 
Kg  es  Environmental  Adjustment  Factor 
«*  Complexity  Adjustment  Factor 
H = Cycling  Rate  Adjustment  Factor 

Cjf  c 

Ilj,  as  Application  and  Construction  Adjustment  Factor 
Xq,  Base  Temperature  Failure  Rate 

= Load  Type  and  Stress  Adjustment  Factor 


Figure  5.2-1  presents  the  relay  model  with  values  for  the 
failure  rate  and  adjustment  factors.  The  model  applies  to  devices 
covered  under  the  following  specifications:  MIL-R-5757;  MIL-R-6106; 
MIL-R-19523;  MIL-R-39016;  MIL-R-19648;  MIL-R-83725;  and  MIL-R-83726. 

The  base  failure  rate  and  adjustment  factor  values  are  based 
on  certain  assumptions.  Refer  to  the  following  sections  for  a 
description  of  these  parameters. 

5.2.1  Base  Failure  Rate  (\^) 

The  equation  for  the  base  failure  rate,  Xj^»  is: 

Xjj  — Xq, 


where 


Ae" 


and  Hr  '=  e 


where 


X 


iJL±J21)  y 


H 


T = ambient  operating  temperature  in  ®C. 

S <=  operating  load  current/rated  resistive  load  current 
e » natural  logarithm  base,  2,718 
A,  Nq,,  Ng,  G and  H are  model  constants 
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The  values  for  the  constant  parameters  are  shown  in  Table 
5.2“1.  The  resulting  values  of  and  are  presented  in  Figure 
5.2-1. 


TABLE  5.2-1.  RELAY  BASE  FAILURE  RATE  MODEL  CONSTANTS 


1 Constants 

{85“C) 

At 

(125-C) 

(Lamp) 

“l 

„ (Res) 

"l 

A 

5.55  X 10"^ 

5.4  X lO"^ 

- 

- 

- 

352.0 

377.0 

- 

- 

- 

- 

- 

0.20 

0.40 

0.80 

G 

15.7 

10.4 

- 

- 

- 

H 

2.0 

2.0 

2.0 

5.2.2  n Adjustment  Factors 

5. 2. 2.1  Environmental  Adjustment  Factor,  iig 

Ilg  accounts  for  the  influence  of  environmental  factors  other 
than  temperature.  Refer  to  the  environment  description  in  Appendix 


5. 2. 2. 2  Complexity  Adjustment  Factor, 

accounts  for  the  contact  form  and  the  number  of  contacts  in 
the  relay.  The  factor  applies  to  active  conducting  contacts. 


5. 2, 2. 3  Cycling  Rate  Adjustment  Factor,  n 


eye 


n modifies  the  model  for  the  rate  of  cycling. 

cy  C/ 

The  value  of  n is  not  valid  when  relays  are  used  at  cycling 
eye 

rates  beyond  their  basic  design  limits.  For  example,  above  100 
cycles  per  hour  a power  contactor  may  overheat;  or  attempting  to 
operate  a general-purpose  relay  above  10  cycles  per  second  may  deform 
the  mechanical  motion  so  that  normal  wiping  action  cannot  take  place 
and  intermittent  missing  may  result. 

5. 2. 2. 4  Application  and  Construction  Adjustment  Factor,  He 

. r 

adjusts  model  for  influence  of  family  types  and  application. 
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Contact 

Rating 

Signal 
Current 
(low  mv 
and  ma) 


0-5  amp 


5-20  amp 
5-20  amp 


FIGURE  5.2-1  MIL-HDBK-217B  OPERATIONAL  FAILURE  RATE 
PREDICTION  MODEL  FOR  RELAYS  (continued) 

lip  for  Relay  Application  and  Construction  Type 


2 5-GO C amp 


Up 

Application  Type 

Construction  Type 

MIL-SPEC 

Quality 

LOWER 

Quality 

Dry  Circuit 

Armature  (Long) 

4 

12 

Dry  Reed 

2 

6 

Mercury  Wetted 

1 

3 

Magnetic  Latching 

6 

12 

' 

Balanced  Armature 

7 

14 

Solenoid 

7 

14 

General  Purpose 

Armature  (Long) 

3 

6 

Balanced  Armature 

5 

10 

Solenoid 

6 

12 

Sensitive 
(0-100  ntw) 

Armature  (Long  and 
short) 

5 

15 

Mercury  Wetted 

2 

6 

Magnetic  Latching 

8 

20 

Meter  Movement 

100 

100 

Balanced  Armature 

10 

30 

Polarized 

Armature  (Short) 

10 

30 

Meter  Movement 

100 

100 

Vibrating  Reed 

Dry  Reed 

2 

6 

Mercury  Wetted 

1 

3 

High  Speed 

Armature  (Balanced 
and  short) 

25 

NA 

Dry  Reed 

2 

NA 

Thermal  Time  Delay 

Bimetal 

50 

100 

Electronic  Time 
Delay  Non-Thermal 

9 

12 

Latching  (magnetic) 

High  Voltage 
Modivui)  Power 


Contactors  (High 
Current ) 


Dry  Reed 
Mercury  Wetted 
Balanced  Airmature 

Vacuum  (Glass) 
Vacuum  (Ceramic) 

Armature  (Long  and 
short) 

Mercury  Wetted 
Magnetic  Latching 
Mechanical  Latching 
Balanced  Armature 
Solenoid 

Armatvirc  (Short) 
Mf'chatii c.il  Latching 
Iti lanced  Armature 
fiolenoid 
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5 . 3 Operational/Non-Operational  Falluro  Rate  Comparisons 

5.3,1  Sample  Operational  Failure  Rate  Calculation 

From  the  model  in  Section  5.2,  the  lowest  comparable  opera- 
tional failure  rate  for  a relay  is  calculated  below  for  comparison 
to  the  storage  condition. 

The  assumed  relay  is  rated  for  125®C  and  operated  at  2S®C, 

« 0.0059. 


Thp*  load  is  resistive,  and  the  load  current  is  0.05 
The  relay  is  MIL.  specification  quality 

Hj,  « 2.0.  (The 

environment  is  taken  as  ground  fixed  to  be  comparable  to  field 
storage  where  temperature  and  humidity  are  not  controlled.)  Con- 

Cycling  rate  is  less  than  once  por 
Application  is  medium  power  and  construction  is 


T 

times  rated,  n,j,  1.00. 

and  is  operated  in  a ground  fixed  environment,  ..j. 


tacts  are  SPST,  » .1.0. 


hour,  n 


CYC 


» 0.1. 


mercury  wetted,  lip  =1.  For  this  relay,  the  predicted  failure 
rate  is  0.0012  failures  per  million  hour.s,  or  1.2  fit. 


5.3.2  Comparison  of  Storage  and  Operational  Failure  Rates 

The  failure  rate  predicted  by  the  model  of  Section  5.2 
is  lower  than  the  storage  failure  rate.  There  are  several 
possible  explanations  for  this  situation;  (1)  the  storage  data 
are  not  sufficient  to  justify  calculation  of  failure  rates  tor 
specific  types,  so  that  a suitable  comparison  is  not  possible, 

(2)  Occasional  operation  serves  to  break  down  contact  film,  so 
that  the  operational  failure  rate  may  actually  bo  less  tJian  the 
storage  failure  rate  for  some  relay  typos,  (This  should  not  apply 
to  the  mercury -wet ted  type  of  the  sample  calculation,  however.) 

(3)  In  seeking  the  lowest  comparable  failure  rate,  the  model  of 
Section  5.2  may  have  been  extrapolated  beyond  its  supporting  data. 

GIDEP  data  shows  an  average  operating  failure  rate  of  20  fit 
for  relays  in  a laboratory  environment.  GIPEP  reports  an  average 
failure  rate  of  3393  fit  for  a shipboard,  exterior  dock  environ- 
ment, the  only  other  relay  onv Ironmoiit  for  which  there  was  suffi- 
cient data  to  report,  an  average. 
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Op«rAtion«l  fiilur*  d«u  for  mliiyi  wms  OKtraotoa 
fx-om  report  RADC“TR-74-26tt , Revision  of  RADG  Noneleeti’onio 
Reliability  Notebook,  D.  i\  Cottrell,  ot  «1,  Martin  Marietta 
Aerospace,  elated  October  1974.  This  data  is  ahown  in  Table 
5,3-1  and  ooropared  with  the  non-operating  failure  rate  pre” 
eviction.  Comparing  the  conuwon  ©nviroimunt  (ground)  indioatea 
a non-operating  to  operating  ratio  of  1)20. 


TABLE  5.3-1.  OPRRATIQNAL/NON-OPERATI’ONAL  RELIABILITY 

CO^U'ARISON 


ENVIRONMENT 

PART,  HOURS 

NO.  OF 
FAILURES 

FAILUUli  KATE 
IN  FITS 

^op/1 

Non-Operating 
Ground,  Fixed 

459.672 

4 

8.5 

m 

Opex’ating 

Satellite 

118.835 

1 

8.4 

1. 

Ground 

78.261 

13 

166. 

20. 

Airborne 

8.602 

58 

6743. 

793. 

Helicopter 

2.531 

157 

62031. 

7298. 

Shipboard 

22.552 

17 

754. 

89. 

Submarine 

43.031 

55 

1278. 

IftO. 

5,4  The  Role  of  Oxygen  in  the  Atjttoephere  of  Relay  Contaote 

^ inBiTiTi  Tn~i*Tn~iTMn—  I I it  n i n — i..i riTw — i — i — | i r *'i  ' ' " ~ nBnipa 

It  has  become  oo)n)\\on  practice  to  encloae  switch  aiul  relay 
contacto  within  an  hermotioally  aealod  case.  The  use  of 
chemically  inert  atinoaphere  turns  out  to  be  disaUvantagooua . 
Oxygen  in  subatantial  proportion  is  deairable  for  two  roaaona, 
both  related  to  the  formation  of  a film  at  the  contact  surface. 
One  is  that  the  film  acta  aa  a lubricant,  preventing  sticking  of 
tho  contacts)  tho  other  ia  that  the  film  substantially  reduces 
damage  to  tho  cathode  fron  arcing. 
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nKpi^viin^iUtt  on  «i^hott4oh  Ai 

i[¥ho  ^ok'Rya  AdhoDlon*  a^4(ikint|(  aniJi  ooUt  woUllnq  rot^ot 
teo  tiho  same  (.u'oooaaO  Ho  doaoriboa  aNperlmeiUa  on  nro  ^ama^o  at, 
pA^oa  I00-,'4U»  aoo  oaj^ooiaUy  fiqurea  &t)<09  anil  1^.10.  ¥ho  iMa'» 
duotelon  in  loaa  of  @ont\AQf  Im  iai'uo«  a faotot^  of  fon  ov 

aO|  bvit  tho  thoovotioal  oaplanatilon  foi^  it  in  not^  onf4roly  nafiM" 
faotiot'y.  Tho  a|40t  in  iai'sinv  an4  oyoiot;',  an4  iHla  nu^^onin 

tiho  oay^on  aomohow  voduooi  tho  work  funot^ion. 

8At\oa**  ^itoaorihoa  tho  iiuluatvy  onporionoo  with  atiokin*^  oon*' 
taeta  in  ^onoral  tow^a  and  fllvea  aeveval  oaae  hiatorion,  Ho  vo** 
marka  that  <;U*y  OMy^on  in  addacl  to  tha  fill  ^aa  by  aevoral  manu* 
faotUKora  in  amounta  op  to  ,^0  poroant  by  voiumo. 

Son\o  Qvtrront  apooifioationa  i\o  not  pormit  t)\o  vmo  of  OKyqon 
in  the  fill  qaa.  MXL“U"6016P»  hoJayn  oalletl  for  o "aultablo  inoit 
^aa”  at  Seotion  1.4  <3  Mlb"W-57^V  anils  fov  tho  “Ooslrad  iiu'vt 
preanuriaing  ^na"  at  Seation  6.4  (o),  Mlb'H"l9r>2i,  .ind 

NXL*-R-83726  mako  no  montion  of  the  fill  \]aa. 

S . 5 atora^o  Heaonvnvendationa 

The  field  of  protoativ©  relaying  hnu  aome  cloa©  p.u'alioio 
with  iwiaailo  requirements.  The  purpoao  there  in  to  prevent  danutyo 
to  power  ayatema.  The  ayatow  is  aontinually  monitored  by  a oom" 
plex  aot  of  relaya  which  are  able  to  diatingulah  faults  both  a« 
to  time  and  location#  ano  which  cUacorinootw  that-  part  of  tho 
ayatom  when  faults  occur.  .nractlcfc>  in  thio  field  haa  been  to  in- 
apect  and  teat  the  protective  relays  aivnvially. 

No  applicable  storage  experience  is  .U  hand,  but  it  ia 
auggeated  on  general  principlOvS  that  elocl ronuignetic  relaya  be 
inapected  and  operated  periodical ly . The  inspect  ion  ahould 
particularly  look  Cor  evidence  of  corroaicn#  and  the  opt'rat  ion 
ahould  teat  for  aborts  and  opens.  Operation  under  load  wuuUl 
not  aoem  to  be  a requirement. 

* "Electric  Contacta,"  Ragnar  Holm,  Eourth  Eviction,  y>pr  inqev-Vor l.ui , 
1967. 

**  "Sel  f-Adhosion  or  Cold  Welding  of  Kelay  Contacts,"  C.  K.  IKiIi'm, 
Procoedingu  of  the  I9th  Ani\ual  Relay  ConCu.ence,  Oklahoma  lUate 
Univeraicy,  Stillwater,  OK,  April  1971. 
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ai'o  in  a 8nal«d  onQloaui'Qi  V.hQ  £ill 

should  inoludu  osygun, 

Of  |)oasihl@  importsnuo  £or  stoi'A^o  afu  £ailuif^>  modus  duu 
to  oorropion,  Hiatopienlly , thin  has  buan  a prohlom  whora  fine 
wire  is  used  for  the  ooil,  hut  sealed  oonatruotion  has  overoome 
it.  The  ooil  munt  have  insulation,  and  there  h.^H  boon  some 
problem  due  to  vapors  of  organic  >T\ateriul  from  the  insulation 
or  potting  compound  on  the  oontaut  aurfaoe,  when  the  ooil  and 
the  oontaots  were  sealed  into  a oommon  eneloauro. 

Relay  design  and  praotioo  have  matured  to  the  point  where 
hardly  any  storage  failures  remain  to  ho  examined.  The  only 
failure  in  the  set  of  data  dosoribed  in  Section  5.1.3  occurred 
in  an  operational  apaoecraft,  no  it  is  poaaible  to  argue  timt 
it  aheuld  not  be  counted  aa  a storage  failure. 

5 . 6 HeCorence 

The  information  in  Section  S ie  a aun\n\ary  of  doc\»ment 
number  LC-7a"KM3,  "Holay  Analyaia,"  dated  t^'obruary'  1978.  Refer 
to  that  document  for  details  of  data  collection  and  analysis 
as  well  aa  technical  dotal  la  of  relay  operv^tlon.  Some  com- 
parative infomatlon  ia  taken  from  MIL-HDDK-217B. 
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6 . 0 Electromechanical  Rotating  Devices 

Electromechanical  rotating  devices  considered  in  this 
report  include  electric  motors,  generators,  synchros  and  re- 
solvers. Gyros  and  accelerometers  are  not  included  here  but 
are  analyzed  in  reports  LC-78-EM1  and  LC-78-EM2  respectively. 

The  rotating  devices  serve  a number  of  functions  in 
various  missile  systems.  They  include  control-system  applica- 
tions, power  generation,  fans  and  blowers  for  cooling,  antenna 
spin  motors,  etc.  Control  system  applications  include  torque 
motors  in  gyro  platforms,  servo  motors,  synchros  and  resolvers. 

The  action  of  a dc  electric  motor  results  from  the  reac- 
tion between  a rotating  magnetic  field,  a permanently  situated 
magnetic  field,  brushes  and  commutator.  To  keep  the  rotating 
element,  the  armature,  of  a dc  motor  continually  rotating  in  one 
direction,  current  must  be  passed  through  the  moving  conductor 
at  the  radian  angle  opportune  to  its  reaction  with  a magnetic 
field  flux.  Also,  this  current  must  be  switched  off  when  the 
required  reaction  is  completed.  This  switching  process  is 
accomplished  by  brushes  and  commutator  which  functionally  is  a 
type  of  rotary  switch.  Voltage  applied  to  the  brushes  causes 
a current  to  flow  through  the  armature  coils  which  produce  a 
magnetic  field.  This  field  seeks  to  align  itself  with  the 
permanently  located  magnetic  field  and  develops  a force  that 
causes  the  armature  to  turn.  The  rotation  of  the  armature 
places  different  commutator  bars  under  the  brushes,  which  re- 
sults in  a new  set  of  armature  coils  to  be  energized  and,  in 
turn,  causes  further  rotation  of  the  armature. 

For  all  small  dc  motors,  the  armature  or  rotating  element 
is  basically  the  same,  consisting  of  a laminated  iron  core, 
copper  wire,  and  a commutator.  The  insulated  wire  is  wound  in 
coils  distributed  around  the  iron  core,  and  are  generally  lap 
wound,  each  end  terminating  on  a commutator  bar.  The  brushes 
contact  the  commutator  bars  and  provide  the  conductive  path 
from  the  power  supply  to  the  armature  coils.  The  permanently 
fixed  magnetic  field  is  either  a permanent  magnet  or  an  elec- 
tromagnet formed  by  dc  current  flowing  Lhrough  windings  around 
an  iron  core  field  pole. 


6-1 


The  construction  of  the  other  rotating  devices  is  very 
like  that  of  the  dc  electric  motors. 

AC  motors  operate  on  power  supplies  that  reverse  polarity 
cyclically,  sinusoidally,  and  repetitively.  AC  motors  are 
divided  into  two  main  groups  - single  phase,  in  which  only 
one  ac  voltage  (or  phase)  drives  the  motor;  and  polyphase, 
wherein  two  or  more  voltages  or  phases  drive  the  motor.  The 
method  of  providing  starting  torque  usually  defines  the  motor 
type.  These  include  shaded-pole  motors,  capacitor  motors  and 
repulsion/induction  motors. 

A torque  motor  is  one  designed  premarily  to  exert  torque 
through  a limited  travel  or  in  a stalled  position.  Such  a motor 
may  be  capable  of  being  stalled  continuously  or  only  for  a 
limited  time.  Torque  motors  are  designed  for  applications  which 
require  prolonged  torques  or  certain  special  running-torque  char- 
acteristics. Direct-current,  single-phase,  or  poly-phase  in- 
duction, repulsion  universal,  PM,  brushless,  and  other  motors 
can  be  designed  as  torque  motors.  Torque  motors  of  the  direct 
coupled  type  are  used  primarily  in  inertial  applications  such 
as  stable  platforms. 

Synchros  and  resolvers  are  low  speed,  low  load  rotating 
devices  used  in  a service  requiring  only  slow  and  infrequent 
motion.  They  are  used  for  precise  transmission,  reception  or 
conversion  of  angular  data.  The  construction  of  servos  and 
resolvers  is  very  like  that  of  electric  motors,  that  is, 
laminated  iron  stator  and  rotor  with  suitable  coils  placed 
in  slots  in  the  faces,  the  rotor  being  mounted  on  bearings, 
with  slip  rings  used  to  power  the  rotor.  The  operation  is  more 
easily  visualized  by  considering  them  as  variable  transformers 
with  voltage  ratio  dependent  on  shaft  position.  An  unbalance 
in  the  voltages  can  be  used  directly  to  create  a torque  driving 
the  output  shaft  to  null,  or  it  can  be  usi^d  as  the  input  to  a 
servo  system  driving  the  system  toward  the  set  point. 

A servo  motor  is  basically  a two-phase,  reversible,  ac 
induction  motor  which  has  been  modified  for  servo  operation. 

These  operations  require  fast  starts,  acctileration , quick  stops 
and  reversals,  and  a nearly  linear  speed-uorque  curve  and 
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accurate  control.  A small-diameter,  high-resistance  rotor 
helps  to  give  these  characteristics.  A high  torque-to-inertia 
ratio  and  a straight-line  speed-torque  curve  are  inherhent 
characteristics  of  this  type  motor.  Classes  include  Low  Iner- 
tia Servomotors  for  precision,  and  Viscous  Damped  Servomotors 
which  provide  greater  damping  than  is  available  through  the 
technique  of  reducing  the  no-load  speed. 

6 . 1 Storage  Reliability  Analysis 

6.1.1  Hon-Operating  Failure  Rates 

Predicted  non-operating  failure  rates  for  various  device 
types  are  given  in  Table  6.1-1.  Also  included  is  the  90% 
confidence  limit.  The  true  failure  rate  should  lie  below 
this  limit  with  90%  confidence.  For  switches  showing  failures, 
a range  of  failure  rates  from  78.4  to  4702  fits  was  observe. 

TABLE  6.1-1.  ROTATING  DEVICES  NON-OPERATING  FAILURE  BATES 

TYPE  FAILURE  RATE  IN  FITS*  90%  CONFIDENCE  LIMIT 


AC  Generator 

795.5 

1203. 

Slip  Ring  Assy. 

120.1 

277. 

Torquer  Motor 

308.8 

'^5. 

Resolvers  & Synchros 

140.9 

' / 5 . 

AC  Motor 

431.6 

1679. 

DC  Motor 

34.4 

77. 

Blowers  & Fans 

36.1 

83. 

6.1.2  Data  Description 

Non-operating  data  was  available  on  rotating  devices  from 
three  sources  and  tv/o  missile  programs.  The  data  shown  in 
Table  6.1-2  represents  190.5  million  part  storage  hours  with 
31  failures  reported.  The  overall  failure  rate  for  all  the 
devices  is  162.7  fits  (failures  per  billion  hours).  The  failure 
rates  range  from  78.4  fits  to  4702  fits.  A number  of  types  and 
applications  are  included  in  the  data. 
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Each  data  source  is  described  below. 

6. 1.2.1  Source  A Data 

Source  A represents  a reliability  study  performed  under 
contract  to  RADC  in  1974.  This  source  identified  the  type 
and  quality  grades  for  the  devides,  however,  it  provided 
no  information  regarding  storage  conditions  or  individual 
programs.  The  types  of  rotating  devices  in  the  data  included: 
dc  motors,  torque  motors,  ac  generators  resolvers,  blowers 
and  fans.  The  following  failures  were  reported:  one  ac  motor, 
eleven  ac  generators,  and  two  resolvers.  No  details  on  these 
failures  were  available. 

6 . 1 . 2 . 2 Source  B Data 

The  storage  data  under  Source  B actually  represents  stand- 
by data  in  an  orbiting  satellite  environment.  No  failures 
were  indicated  in  10  thousand  slip  ring  assembly  standby  hours. 
Three  failures  were  reported  in  638,000  electric  motor  standby 
hours . 

6 . 1 . 2 . 3 Source  C Data 

Source  c rep-wssents  a reliability  study  perfoirmed  under 
contract  to  RADC  in  1968.  This  data  included  ac,  dc  and 
blower  motors  with  no  failures  reported. 

6. 1.2. 4 Missile  E-1  Data 

Missile  E-1  data  consists  of  874  missiles  stored  for  20 
months.  The  missiles  were  stored  in  containers  exposed  to 
external  environmental  conditions  in  the  northeast  U.  S.  They 
were  also  transported  once  from  coast  to  coast.  Data  was 
available  on  a dc  motor  and  an  antenna  spin  motor.  No 
failures  were  reported  at  the  20  month  test. 

6. 1.2. 5 Missile  I Data 

Missile  I data  consists  of  2,070  missiles  stored  for 
periods  from  1 months  to  40  months  for  an  average  storage 
period  of  14  months.  Approximately  80  percent  of  the  missiles 
were  stored  in  U.  S.  depots  while  the  remainder  were  stored 
at  various  bases  around  the  country.  Two  torque  motors  were 
on  each  missile  and  fourteen  failures  were  reported.  The 
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age  of  the  units  at  failure  were  as  follows:  4 months  (2) ; 
5 months  (1);  7 months  (2);  9 months  (1);  10  months  (1); 

11  months  (2);  17  months  (1);  18  months  (1);  19  months  (2); 
and  32  months  (1).  The  primary  failure  mode  was  listed  as 
"shorted  brakes."  No  failure  analysis  was  available  and  it 
is  not  certain  whether  this  represents  a storage  problem  or 
a test  stress  problem  in  the  system. 

TABLE  6.1-2.  NON-OPERATING  DATA  FOR  ROTATING  DEVICES 


SOURCE 

NO.  OF 
DEVICES 

MILLION 
PART  HRS. 

NO.  OF 
FAILURES 

FAILURE  RATE 
IN  FTT^S 

COMMENT 

A 

- 

.160 

0 

(<6250.  ) 

elec.  mtr.  iGd) 
instrumentation 

4.158 

0 

(<240. 5) 

dc  torque  motor 
(Gd) 

- 

2.004 

1 

499.0 

2 HP  ac  mtr . (sub) 

- 

13.827 

11 

795.5 

ac  generator 

- 

14.196 

2 

140.9 

resolver  (Gd) 

- 

8.316 

0 

(<120. 3) 

slip  ring  assy. 

- 

2.21 

0 

(<452. 5) 

blower  & fan  (Gd) 

• 

7.260 

0 

(<137. 7) 

blower  & fan 
axial  (Gd) 

.410 

0 

(<2439. ) 

blower  & fan  cen- 
trifugal (Gd) 

B 

75 

.638 

3 

4702. 

electric  motor 

237 

.0097 

0 

(<103000. ) 

slip  ring  assy. 

C 

- 

5.7 

0 

(<175. 4) 

dc  reversible 

1253 

4.65 

0 

(<215. 1) 

blower  & fan  ac 
missile 

- 

.0038 

0 

(<263000. ) 

ac  motor 

- 

.149 

0 

(<6711. ) 

ac  motor 

- 

4.836 

0 

(<206. 8) 

ac  blower  motor 

1235 

4.65 

0 

(v215.1) 

dc  motor,  missile 

- 

39.4 

0 

(<25.4) 

dc  motor 

- 

4.836 

0 

(<206. 8) 

dc  motor 

- 

5.71 

0 

(<175. 1) 

dc  motor 

- 

.3095 

0 

(<3231. ) 

dc  motor 

- 

.3442 

0 

(<2905. ) 

dc  motor 

Missile 

E-1 

874 

12.760 

0 

(<78.4) 

dc  motor 

Missile 

E-1 

874 

12.760 

0 

(<78.4) 

antenna  spin 
motor 

Missile 

I 

4140 

41.18 

14 

340. 

torque  motor 

TOTALS 

190.4772 

31 

162.7 
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6.1.3  Data  Evaluation 


The  non-operating  data  is  recombined  in  Table  6.1-3  by 
device  type.  Failure  rates  are  calculated  for  the  combined 
data  and  the  one-sided  90%  confidence  limit  is  given.  The 
true  failure  rate  should  lie  below  this  limit  with  90%  confi- 
dence. 

A comparison  of  the  failure  rates  tends  to  indicate  that 
the  rotating  di,/ices  with  the  simpler  functions  have  a better 
storage  reliability.  As  the  complexity  of  the  function  in- 
creases the  failure  rate  tends  to  increase.  Of  course,  this 
is  an  assumption  and  other  factors  may  be  causing  these 
differences.  Due  to  insufficient  data,  comparisons  cannot  be 
made  between  environments.  The  failures  attributed  to  torquer 
motors  may  not  all  be  storage  related. 

A test  of  significance  was  performed  to  determine  whether 
a single  failure  rate  could  be  applied  for  all  of  the  devices. 
This  test  is  described  in  Appendix  A.  The  tost  indicated  that 
there  was  a significant  difference  in  the  failure  rates  and  the 
data  could  not  be  pooled  for  a common  failure  rate. 

A comparison  was  made  between  this  data  and  the  gyro 
failure  rate  in  report  LC-78-EM1  and  the  motor  driven  switch 
failure  rate  in  report  LC-78-EM3.  The  gyro  failure  rate  of 
133  fits  and  the  motor  driven  switch  failure  rate  of  138  fits 
falls  in  the  median  range  of  this  data.  This  would  indicate 
that  all  of  these  rotating  devices  are  experiencing  similar 
failure  mechanisms. 

6.1.4  Failure  Modes  and  Mechanisms 

Only  one  source  from  the  non-operating  data  described 
above  gave  a failure  mode.  Data  on  Missile  I indicated  the 
primary  mode  of  failures  for  the  torque  motors  was  a shorted 
brake.  It  is  not  certain  whether  this  is  actually  a storage 
problem  or  a particular  characteristic  in  the  missile  design. 

One  system  for  which  no  storage  time  data  Vvas  available 
reported  a significant  number  of  motor  failures  in  eight 
years  of  storage.  The  system  was  stored  in  a controlled 


environment  and  was  activated  periodically.  Investigations 
showed  that  the  cause  of  failure  was  a result  of  commutator 
filming.  It  was  attributed  to  outgassing  of  either  the 
lubricant  or  coil  impregnant  after  years  of  storage. 

It  is  assumed  failure  mechanisms  of  these  rotating  de- 
vices would  be  similar  to  those  reported  for  other  rotating 
devices  in  reports  LC-78-EM1  (Gyroscopes)  and  LC-78-EM4 
(Switches).  The  gyro  mechanisms  were  mostly  concerned  with; 
spin  bearing  lubrication  (drying  and  oxidation  were  chief 
concerns) ; low  temperature  annealing  of  rotating  surfaces; 
and  corrosion  of  surfaces.  The  motordrivennswitch  mechanisms 
includes  swelling,  cracking  and  general  materiel  degradation  of 
0-rings,  packing  and  insulators.  Corrosion  of  bearing,  contacts, 
switch  parts,  gear  assemblies  and  motor  armature  were  also 
postulated. 

Long  life  space  hardware  also  experiences  some  similarities 
to  storage.  Some  of  the  applicable  failure  mechanisms  include; 
inadequate,  lubrication  due  to  evaporation  or  migration;  ox- 
idation of  lubricant;  bearing  misalignment;  improper  shaft  fit; 
grinding  and  housing  imperfections;  and  inadequate  lubricant 
cleanliness. 

TABLE  6.1-3.  NON-OPERATING  DATA  BY  DEVICE  TYPE 


TYPE 

MILLION 
NON-OP.  PART 
HOURS 

NO.  OF 
FAILURES 

FAILURE  RATE 
IN  FITS 

90%  ONE-SIDE, 
CONFIDENCE 
LIMIT 

AC  Generator 

13.827 

11 

795.5 

1203. 

Slip  Ring  Assy. 

8.3257 

0 

120.1 

^77. 

Torquer  Motor 

45.338 

14 

308.8 

445. 

Resolvers  & 
Synchros 

14.196 

2 

140.9 

375. 

AC  Motor 

2.3168 

1 

431.6 

1679. 

DC  Motor 

87.1077 

3 

34.4 

77. 

Blowers  & Pans 

27.682 

0 

36.1 

83. 
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6 . 2 Operational  Prediction  Models 

6.2.1  High  Speed  Motor  Operational  Prediction  Model 

Yhe  MIX«*‘KDBK-217B  failure  rate  nodel  for  hi'-speed  oiotors  is: 

.-6 


X a 
P 


(Afi  + X 10 


where : 


Xg  a electrical  failure  rate  = 


'W 


= mechanical  failxire  rate  = ^pop 


op 

Xj^  » electrical  base  failure  rate 

Dp  e motor  family  & quality  factor 

t = motor  operating  time  (hr.)  for  which  X is  to  be 
” calculated  ^ 

P = percentage  of  motor  mechanical  failures  during 
operating  period,  t^p 


n_  = envii'onmental  factor 
E 


The  model , failure  rate  and  adjustment  factor  values  are  given 
in  Figures  6.2-1  through  6*2-7. 

The  base  failure  rate,  X^,  motor  family  and  quality  factor, 

Ilg  and  environmental  factor,  n^,  values  are  obtained  directly  from 
Figure  6.2-1.  To  obtain  the  value  for  Xj^,  the  operating  .hot-spot 
temperature  must  be  known.  If  the  operating  hot-spot  temperature 
is  not  known  or  c2uinot  be  measured,  calculate  it  approximately: 
ambient  plus  40 “C  *=  frame  temperature;  frame  temperature  plus  10 “C  = 
hot-spot  temperature. 

The  value  for  t is  the  operating  time  for  which  X is  to  be 

op  ir  3 . p 

calculated. 

The  value  for  Pp^p  is  obtained  from  Figures  6 .2-2  through 
6.2-7  in  two  steps; 

Step  1 - Enter  Figure  6.2-2,  -3,  or  -4  with  frame  temperature 
(degrees  C)  and  operating  speed  (rpm)  to  obtain  lot 
MTTF.  Which  figure  is  used  depends  upon  whether  the 
motor  has  a commutator  or  is  brushless  and  (if 
brushless)  whether  or  not  silicone  lubricant  is  used. 

In  Figures  6.2-2  & -3,  use  linear  interpolation 
between  the  two  frame  temperature  curves,  if  necessary. 

6-8 


If  frame  temperature  is  unknown,  use  ambient  tem- 
perature plus  40  degrees  C. 

Step  2 - Determine  P_qq»  Figure  6.2-5,  6.2-6  or  6. 2-7.  The 

JL* 

figure  to  use  depends  upon  whether  the  motor  has 
Case  A,  B,  or  C wearout  distribution.  Motors  in 
Case  A have  extremely  uniform  wearout  characteris- 
tics whereas  those  in  Case  C have  little  uniformity 
indicative  of  poor  material  and  process  control. 

Case  B is  intermediate  and  is  a common  characteristic 
of  many  motors.  Use  Case  B (Figure  6.2-6)  if  details 
are  unknown.  Enter  the  figure  with  the  value,  t^p/lot 
MTTF  (both  in  hours)  and  Operating  Load/Rated  Load. 

Read  P on  the  abscissa.  P is  the  percentage  of 
pop  pop 

failures  during  the  operating  time, 

The  value  obtained  for  is  the  average  mechanical  failure 
rate  during  the  operating  time,  t^^  The  motor  mechanical  failure 
rate  is  essentially  a wearout  type  and  increases  with  time,  while 


Xjj  has  a constant  failure  rate. 


If  were  calculated  for  a 


motor  for  a given  t^^  (i.e.  4000  hrs.),  this  X^  would  be  valid  only 


op 


up  to  4,000  motor  operating  hours.  This  value  of  should  not  be 
considered  as  constant  over  the  equipment  life  (e.g.  10  years)  unless 
the  motor  were  replaced  at  the  end  of  each  t^^  interval,  4000  hrs. 

The  value  for  the  base  failure  rate,  Xj^,  may  be  calculated 
from  the  following  equation: 

X 


where 


Xb  ==  Ae' 

X = (JL±_273__j 
^ ^ N„  ^ 


T = operating  hot-spot  temperature  C’C) 
e = natural  logarithm  base,  2,718 
A,  and  G are  model  constants. 

The  base  failure  rate  is  based  on  the  relationship  between 
the  operating  hot-spot  temperature  and  the  rated  insulation  hot- 
spot temperature.  Determine  the  rating  of  insulation  from  the 
specifications  or  from  the  supplier's  data  and  the  operating  hot- 
spot temperature.  The  values  for  the  model  constants  can  then 
be  obtained  from  Table  6.2-1. 
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TABLE  6.2-1  BASE  FAILURE  RATE  MODEL 
CONSTANTS 


Equation 

Constants 

Rated 

Insulation  Hot-Spot  Temperature  j 

lOS^C 

lao^c 

155®C 

180®C  j 

A 

7.20 

X 10“'^ 

6.06 

X lO”^ 

1.83 

X 10““^ 

2.03 

X 10”^ 

352 

364 

409 

398 

G 

14.0 

CO 

. 

10.0 

3.8  1 
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FIGURE  6.2-2.  LOT  MTTF  FOR  BRUSHLESS  MOTORS  (85 ®C) 
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FIGURE  6.2-3.  LOT  MTTF  FOR  SILICONE-LUBRICATED  BRUSHLESS 

MOTORS  (125“C) 
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CASE  C WEAR-OUT  DISTRIBUTION  (3a  at  0.0  MTTF)  FO’^ 
HIGH  SPEED  MOTORS 


6,2.2  Synchros  and  Resolvers  Operational  Prediction  Model 

The  M1L-HDBK-217B  failure  rate  model  for  low-speed,  low 
load  sy  ichros  and  resolvers  is : 

V “ *b  "'s  ''  ”n 


where:  - device  failure  rate 

X.  = base  failure  rate 
b 

Ilg  = Type  and  Size  Adjustment  Factor 

= Adjustment  Factor  for  Number  of  Brushes 
= Environmental  Adjustment  Factor 


The  mcdel,  base  failure  rate  and  adjustment  factor  values 
are  given  in  Figure  6.2-8. 

Synchros  £md  resolvers  are  predominantly  used  in  service 
requiring  only  slow  and  infrequent  motion.  Mechanical  wear-out 
problems  are  not  serious  so  that  the  electrical  failure  mode  can 
predominate,  and  no  mechanical  mode  failure  rate  is  required  in 
the  model  above. 

The  values  for  the  base  failure  rate  may  be  calculated  from 
the  following  equation: 


Afa  » Ae 


T + 273) 


G 


where  T is  the  frame  temperature  in  ®C. 
and  e is  natural  logarithm  base,  2.718 
A,  Ny  and  G are  model  constants. 

The  base  failure  rate  is  based  on  the  frame  temperature  of 
the  synchro  or  resolver.  When  the  actual  frame  temperature  is  not 
known,  assume  ambient  plus  40°C. 

The  values  for  the  model  constants  can  be  obtained  from 
Table  6,2-2, 


TABLE  6.2-2.  BASE  FAILURE  RATE  MODEL  CONSTANTS 


Equation  Constants 

Val  uo 

A 

0 . 53S  X 10““^ 

N 

334 

G^ 

8.r> 

FIGURE  6.2-8.  MIL-HDBK-217B  OPERATIONAL  FAILURE  RATE  MODEL 
FOR  LOW  SPEED,  LOW  LOAD  SYNCHROS  AND  RESOLVERS 
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ti , 2 , 3 MI1..~11DBK-217B  Ulowers  and  Fans  Prediction  Model 

This  soction  describes  the  .t\ethod  for  calculating  the 
failure  rates  of  blowers  and  fans  meeting  the  requirements  of 
MIL-B-23071B  which  are  designated  UQG  (Upper  Quality  Grade)  and 
blowers  and  fans  constructed  to  commercial  standards  which  are 
designated  LQG  (Lower  Quality  Grade) . Failure  rates  of  blowers 
and  fans  are  not  constant  but  are  found  to  be  increasing  with 
time.  The  failure  rates  derived  by  the  methods  presented  in 
this  section  are  average  rates  resulting  from  the  averaging  of 
the  cumulative  hazard  rate  over  the  period  of  time,  t,  as  de- 
fined in  equations  (1)  and  (2).  The  failure  rates  are  strongly 
influenced  by  the  thermal  conditions  of  the  application  and 
particularly  by  the  presence  of  thermal  cycling.  It  is  im- 
portant, for  this  reason,  that  the  thermal  environment  be 
accurately  determined  and  the  proper  models  of  this  section 
employed  in  developing  the  failure  rate.  Other  environmental 
stresses  do  not  have  a significant  effect  on  the  failure  rate. 
Therefore,  no  additional  environmental  or  application  modifying 
factors  are  required. 

The  failure  rate  models  are  presented  in  Figures  6.2-9 
thru  6.1-12. 
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UQG  units  use  - 120,000  hours  if  computed  exceeds  120,000  hours. 
LOG  units  use  = 80,000  hours  if  computed  a exceeds  80,000  hours. 
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6 • 3 Operational/Non-Operational  Reliability  Comparison 

Operational  failure  rate  data  for  rotating  devices  were 
extracted  from  report  RADC“TR“64~268 , Revision  of  RADC  Non- 
electronic Reliability  Notebook,  D.  F.  Cottrell,  et  al,  Martin 
Marietta  Aerospace,  dated  October  1974.  This  data  is  shown 
in  Tables  6.3-1  through  6.3-5  and  compared  with  the  non- 
operating failure  rate  prediction.  Comparing  the  common  en- 
vironment (ground) , the  non-operating  to  operating  ratio  ranges 
from  1:2  for  ac  motors  to  1:658  for  ac  generators. 

TABLE  6.3-1.  OPERATIONAL/NON-OPERATIONAL  RELIABILITY 
COMPARISON  - BLOWERS  AND  FANS 


ENVIRONMENTS 

PART, HRS. 
(106) 

NO.  OF 
FAILURES 

FAILURE  RATE 
IN  FITS 

Non-Operating 

Ground,  Fixed 

27.682 

0 

36.1 

- 

Operating 

Ground 

32.306 

46 

1424. 

39. 

Ground,  Mobile 

19.139 

108 

5643. 

156. 

Airborne 

48.620 

2132 

44123. 

1222. 

Helicopter 

2.027 

173 

85348. 

2364. 

Submarine 

10.953 

5 

456  . 

13. 

Shipboard 

6.072 

112 

18445. 

511. 
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TABLE  6.3*2.  OPERATIONAL/NON-OPERATIONAL  RELIABILITY 
COMPARISON  - ELECTRIC  MOTORS 


PART  HRS. 
(106) 

NO.  OF 
FAILURES 

FAIL.  RATE 
IN  FITS 

ENVIRONMENT 

Non-Operating 

Ground,  Fixed 
dc 

87.1077 

3 

34.4 

dc 

ac 

torquer 

ac 

2.3168 

1 

431.6 

- 

- 

- 

Torquer 

45.338 

14 

308.8 

- 

- 

- 

Operating 

Satellite 

2.295 

2 

871. 

25. 

2 . 

3. 

Ground 

6.509 

9 

1383. 

40. 

3. 

4 . 

Ground,  Mobile 

1.095 

10 

9132. 

265. 

21. 

30. 

Airborne 

5.085 

785 

154376. 

4488. 

358. 

500. 

Helicopter 

.110 

21 

190909. 

5550. 

442. 

618. 

Submar ine 

.234 

11 

47009, 

1367. 

109. 

152. 

Shipboard 

.014 

0 

(<71429.) 

2076. 

165. 

231. 

TABLE  6.3-3.  OPERATIONAL/NON-OPERATIONAL  RELIABILITY 
COMPARISON  - SYNCHROS  AND  RESOLVERS 


PART  HRS.  NO.  OF  FAIL.  RATE 
(106)  FAILURES  IN  FITS  ''no 

ENVIRONMENT 


Non-Operating 


Ground,  Fixed 

14.196 

2 

140.9 

- 

Operating 

Ground,  Mobile 

6.908 

29 

4198. 

30 

Airborne 

.625 

18 

28800. 

204 

Helicopter 

.100 

15 

150000. 

1065 

Submarine 

8.506 

3 

353. 

3 

TABLE  6.3-4  OPERATIONAL/NON-OPERATIONAL  RELIABILITY 

COMPARISONS  - AC  Generators 


ENVIRONMENT  (10°) 

Non-Operating 

Ground,  Fixed  13.827 


PART  HRS.  NO.  OF 
(10^)  FAILURES 


FAILURE  RATE 
IN  FITS 


795.5 


op/x. 


Ground,  Mobile  .086 
Airborne  5.444 
Helicopter  .015 
Shipboard  .341 


45 

6017 

7 

8 


523256. 

1105253. 

466667. 

23460. 


658. 
1389  . 
587. 
29. 


TABLE  6.3-5.  OPERATIONAL/NON-OPERATIONAL  RELIABILITY 
COMPARISONS  - Slip  Ring  Assemblies 


EN^/IRONMENT 

Non-Operatinc 


PART  HRS.  NO.  OF 
(10^)  FAILURES 


FAILURE  RATE 
IN  FITS 


op/X, 


Ground,  Fixed 

8.3257 

0 

(<120. 1) 

•• 

>erci  vXiiy 

Satellite 

.408 

0 

(<2451. ) 

20. 

Ground 

.437 

0 

(<2288  . ) 

19. 

Ground,  Mobile 

2.065 

103 

49879  , 

415. 

Helicopter 

.014 

3 

214286  . 

1784. 

Submarine 

.977 

39 

39918. 

332. 
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7 . 0 Miscellaneous  Electromechanical  Devices 

Table  7-1  summarizes  the  non-operating  data  for  a variety 
of  miscellaneous  electromechanical  devices. 

TABLE  7-1.  MISCELLANEOUS  ELECTROMECHANICAL  DEVICE 


NON-OPERATING  DATA 


SOURCE 

DEVICE 

NO.  OF 
DEVICES 

MILLION 

NON -OP  HRS 

NO.  OF 
FAILURES 

FAILURE  RATE 
IN  FITS 

A 

Transducers , 
Pressure 

2.002 

4 

1998. 

B 

Transducer 

42 

.0882 

0 

(<  11338. ) 

TOTALS  (Transducers) 

2.0902 

4 

1914  . 

Missile 

H 

Antenna  Assy. 
Hydr.  Actuated 

4284 

68.1 

1 

15. 

Missile 

E-1 

Antenna  Assy. 
Elec.  Actuated 

874 

12.76 

0 

(<78.) 

C 

Antenna  Assy. 

- 

.9286 

2.2299 

0 

0 

(<1076  .) 
(<448  .) 

B 

Antenna  Assy. 

8 

.0456 

0 

(<21930  . ) 

R 

Antenna  Assy. 

38 

1.640 

0 

(<610  . ) 

A 

Antenna  Assy. 

- 

.610 

0 

(<1639. ) 

TOTALS  (Antenna  Assys 

.) 

85.704 

1 

11.7 

C 

Rotary  Inverter 

- 

21.6 

0 

(<46.3) 

B 

Timer  & Clocks 

7 

.0178 

0 

(<56180 . ) 

B 

Indicators 

58 

.0046 

0 

(<217391. ) 

A 

Flight  Inst . , 
Missile 

264.00 

25 

94.7 
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APPENDIX  A 

TEST  OF  SIGNIFICANCE  OF  DIFFERENCES  IN  FAILURE  RATES' 

(MORE  THAN  TWO  POPULATIONS) 

The  storage  reliability  data  is  obtained  from  ntamerous 
sources.  A detailed  qualitative  analysis  is  performed  on 
the  data  to  classify  devices,  environments,  uses,  quality  levels, 
failures  inodes  & mechanisms,  and  so  on.  Once  the  data  sets  are 
grouped  according  to  these  analyses,  it  is  still  not  certain 
whether  grouped  sets  of  failure  data  are  in  truth  from  the  same 
statistical  population.  It  is  possible  that  the  failure  rate 
characteristics  of  identical  devices  from  the  same  manufacturers, 
with  the  same  application,  use  environment,  and  so  on,  are  not  from 
the  Scime  population  in  terms  of  reliability  — possibly  due  to 
some  problem  on  a production  line  for  a certain  lot  or  other 
factor. 

Therefore  a stati stical  test  is  performed  to  determine  if 
the  different  data  sets  could  be  from  the  same  statistical  popu- 
lation. 

The  techniqtie  used  is  for  more  than  two  data  sets  and  is 
taken  from  "Statistical  Methods  for  Research  Workers,"  R.  A. 

Fisher,  13th  edition,  Hufner,  1963,  pages  99-101. 

The  techniques  assumes  that  the  underlying  failure  dis- 
tributions each  have  the  same  constant  failure  rate  (X). 

Therefore,  the  probability  of  a number  of  failures  for  each 
population  can  be  represented  by  the  Poisson  distribution. 

A single  failure  rate  is  calculated  based  on  the  pooled 
data  sets  being  tested. 

X = 


where  X 


n 


N 


i=l 


N 

i»l  ^ 


Mean  failure  rate  for  all  data  sets 
the  number  of  failures  in  data  set  i 

the  total  storage  hours  in  data  set  i 

the  number  of  data  sets  being  tested 
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The  expected  nimber  of  failures  and  the  difference  between 
the  expected  number  of  failures  and  actual  failures  is  calculated 
for  each  data  set  based  on  the  pooled  data: 


Mi  « 

XTi 

= 

l^i 

where 

= expected  number  of  failures  for  data  set; 

{based  on  the  pooled  data  sets) 
dj^  =.  absolute  value  of  the  differences  between  the 
expected  number  of  failures  and  the  actual 
failures  for  data  set  i. 

Next#  lower  and  upper  limits  are  calculated  for  the  Poisson 
distribution: 


= (M^ 

+ d.] 

(if 

set  * f^ 

- 1) 

L,  - <M. 

X 1 

- "i=^ 

(if 

“ "i' 

set  *=  f^ 

+ 1) 

(if  <0#  set  *=  0) 


= upper  limit  for  data  set  i 

= lower  limit  for  data  set  i 

{ ] « rounded  down  to  integer  value 
< > = rounded  up  to  integer  value 


The  probability  that  f^  failures  would  occur  in  data  set  i 
given  the  i;opulation  failure  rate  is  \ is  expressed  by  the 
Poisson  distribution: 


P.  ^ 

1 


1 - 


r.  1 - 
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The  individual  probabilities,  P^,  are  the  significance 
probabilities  for  the  individual  distributions.  It  is  required 
to  test  whether  the  ensemble  of  taken  together  represents  an 
improbable  configuration  under  the  null  hypothesis  which  is  that 
the  underlying  distributions  have  the  same  constant  failure  rate 
(A). 

The  test  rs  done  as  follows: 

= - 2 In 
n 

i=l 

Find  Cr  for  « - .05  (5%  level  of  significance)  and  2n 
degrees  of  freedom  from  the  tables  of  chi  square. 

If  C>Cr  reject  the  null  hypothesis  (that  all  of  the  popula- 
tions have  the  same  failure  rate.) 

If  the  null  hypothesis  is  not  rejected,  the  data  sets  can 
be  pooled  and  the  common  failure  rate  X used. 

If  the  null  hypothesis  is  rejected,  engineering  and  statis- 
tical analysis  is  required  to  remove  data  sets  from  the  pooled 
data  until  the  null  hypothesis  is  not  rejected. 

EK^MPLE  1; 


DATA  SET 

T. 

1 

F. 

^ 

M. 

1 

^i 

^i 

^i 

^i 

c. 

1 

1 

587.4 

19 

12.9 

6.1 

18 

7 

.0936 

4.74 

2 

144.1 

0 

3.2 

3.2 

3 

1 

.0849 

4.93 

3 

6 5.6 

1 

1.4 

.4 

2 

2 

1.000 

0 

4 

95.8 

1 

2.1 

1.1 

3 

2 

.5406 

1.23 

C 

128. 

3 

2.8 

.2 

3 

3 

1.000 

0 

6 

281 . 

15 

6.2 

8.8 

14 

0 

.0018 

12.60 

7 

78.6 

2 

1.7 

.3 

1 

1 

1.000 

0 

8 

484 . 8 

_0_ 

10.7 

10.7 

21 

1 

.0016 

12.93 

1865.6 

41 

I c. 

= 36.43 

pooled 

- X = 21 

.98 

fits 

C ^ 3G.43 

2n  degrees  of  freedom  - 16 


(from  chi-square  dist.  at  « = .05)  Cr  = 26.30 
Since  C>Cr  the  null  hypot hesis , that  all  of  the  popu- 

lations have  the  same  failure  rate,  is  rejected. 
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PA;rA  jfiKT 

. ,L 

.JIl. 

1 

1 

t»0/.4 

19 

19.  !i 

.!» 

20 

20 

1.0 

0 

2 

6!>.6 

1 

2.2 

1.2 

3 

2 

.636 

1.2 

3 

9li.U 

1 

3.2 

2.2 

fi 

2 

.277 

2.57 

4 

12». 

3 

4.2 

1.2 

5 

4 

.641 

.89 

!> 

281. 

Hi 

9.3 

f».7 

14 

4 

.070 

5.33 

6 

78 . 6 

2 

2.6 

.6 

3 

3 

1.02 

.0 

1236.4  41  9.99 


I'ouUul  X ' 33.16  lit  II 

C *■  9.99 

2n  i>f  f rtx'dom  > 12 

Cr  *•  21.03 

V<Ci'  - null  hypothosiiu 

All  cUita  Inivo  tho  tiauuj  failux-o  rate  (A  ~ 33 . 16  f itii) . 
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Knvi ronmenU 


Ground,  Benign 


Space,  Flight 


Ground,  Fixed 


Ground,  Mobile 
(and  Portable) 


Naval , 
Sheltered 

Naval , Un- 
sheltered 


Airborne , 
Inhabited 

Airborne , 
Uninhabited 


Missile , 
Launch 


APPENDIX  B 

ENVIRONMENTAL  DESCRIPTION 

Nominal  Environmentctl  Condit ions 

Nearly  zero  environmental  stress  with 
optimum  engineering  operation  ^lnd  main- 
tenance. 

Earth  orbital.  Approaches  Ground,  Be- 
nign conditions  without  access  for 
maintenance.  Vehicle  neither  under 
powered  flight  nor  in  atmospheric  re- 
entry . 

Conditions  less  than  ideal  to  include 
installation  in  permanent  racks  with 
adequate  cooling  air,  maintenance  by 
military  personnel  and  possible  installa- 
tion in  unheated  buildings. 

Conditions  more  severe  than  those  for 
Ground,  Fixed,  mostly  for  vibration  and 
shock.  Cooling  air  supply  may  also  be 
more  limited,  and  maintenance  less  uniform. 

Surface  ship  conditions  similar  to 
Ground,  Fixed,  subject  to  occasional  high 
shock  and  vibration. 

Nominal  surface  shipborne  conditions  but 
with  repetitive  high  levels  of  shock  and 
vibration. 

Typical  cockpit  conditions  without  en- 
vironmental extremes  of  pressure,  tem- 
perature, shock  and  vibration. 

Bomb-bay,  tail,  or  wing  installations  where 
extreme  pressure,  temperature,  and  vibra- 
tion cycling  may  be  aggravated  by  contami- 
nation from  oil,  hydraulic  fluid,  and 
engine  exhaust.  Classes  I and  la  equip- 
ment of  MIL-E-5400  should  not  be  used  in 
this  environment. 

Severe  conditions  of  noise,  vibration, 
and  other  environments  related  to  missile 
launch,  and  space  vehicle  boost  into 
orbit,  vehicle  re-entry  and  landing  by 
parachute.  Conditions  may  also  apply  to 
installation  near  main  rocket  engines 
during  launch  operations. 


